CISA warns of another cPanel plugin flaw exploited in attacks
Teaser from the source
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. government agencies three days to secure their servers against an actively exploited vulnerability (CVE-2026-54420) in the LiteSpeed cPanel user-end plugin. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerAffected vendors and products
More on cPanel
Other advisories
- Not ratedosv:MGASA-2026-0559Updated perl-Cpanel-JSON-XS package fixes security vulnerabilities
- Not ratedosv:openSUSE-SU-2026:12217-1perl-Cpanel-JSON-XS-4.800.0-1.1 on GA media
- Not ratedCVE-2026-110688Cpanel-JSON-XS: ineffiziente algorithmische Komplexität
- Not ratedCVE-2026-110687Cpanel-JSON-XS: fehlerhafte Behandlung von Unicode-Kodierung
- Not ratedCVE-2026-110686Cpanel-JSON-XS: Use-After-Free
- Not ratedCVE-2026-110685Cpanel-JSON-XS: Speicherleck
- Not ratedosv:AZL-109860CVE-2026-110686 affecting package perl-Cpanel-JSON-XS 4.39-1
- Not ratedosv:AZL-109851CVE-2026-110685 affecting package perl-Cpanel-JSON-XS 4.39-1
Other news entries
- cPanel cPanel/WHM: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- cPanel cPanel/WHM: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- cPanel cPanel/WHM: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server ControlNewsThe Hacker News
- Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted AttacksNewsThe Hacker News
- Acronis Patches Exploited Vulnerability in cPanel Backup PluginNewsSecurityWeek
- Acronis warns of actively exploited flaw in its cPanel backup pluginNewsBleepingComputer
- LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared ServerNewsThe Hacker News
ID