CVE-2026-54420

LLM-synthesized narrative grounded in this CVE's description and references.

• Litespeedtech/User-End cPanel Pluginllm-fuzzy

  Range: <2.4.8
• Litespeedtech/Litespeed Cpanel Plugin

  cpe:2.3:a:litespeedtech:litespeed_cpanel_plugin:*:*:*:*:*:*:*:*

  Range: <2.4.8
• Litespeedtech/WHM PlugIn2 versions

  cpe:2.3:a:litespeedtech:litespeed_whm_plugin:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:litespeedtech:litespeed_whm_plugin:*:*:*:*:*:*:*:*range: <5.3.2.0
  • (no CPE)range: <5.3.2.0

• blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/nvdVendor Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
• www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanelnvdProduct

• Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
  The Hacker News · Aug 28, 2026
• ⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More
  The Hacker News · Jun 22, 2026
• CISA Adds LiteSpeed cPanel Plugin Vulnerability to KEV List Following Active Exploitation
  Cyber Security News · Jun 19, 2026
• Joomla, LiteSpeed Vulnerabilities Exploited in Attacks
  SecurityWeek · Jun 17, 2026
• CISA warns of another cPanel plugin flaw exploited in attacks
  BleepingComputer · Jun 16, 2026
• LiteSpeed cPanel Plugin 0-Day Vulnerability Actively Exploited in the Wild
  Cyber Security News · Jun 16, 2026
• CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation
  The Hacker News · Jun 16, 2026
• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  CISA Alerts