Actively exploited vulnerabilities affecting LiteSpeed products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-54420https://wildfortech.com/security#CVE-2026-54420This vulnerability affects the LiteSpeed cPanel plugin on shared hosting servers running CloudLinux/CageFS. A user with FTP or web shell access could exploit a symlink-following flaw to escape their sandboxed environment, potentially accessing or manipulating files belonging to other users or the server itself. On shared hosting platforms, this is especially serious because multiple customers share the same underlying system, meaning one compromised or malicious tenant could impact everyone else.Mon, 15 Jun 2026 00:00:00 GMTLiteSpeedcPanel Pluginhttps://wildfortech.com/security#CVE-2026-48172https://wildfortech.com/security#CVE-2026-48172This vulnerability in the LiteSpeed cPanel Plugin allows any standard cPanel user account to run arbitrary scripts with root-level privileges on the server. In shared hosting environments, where many untrusted users share the same system, this is especially dangerous — a single compromised or malicious account could gain full control of the host, affecting all other tenants and the underlying infrastructure.Tue, 26 May 2026 00:00:00 GMTLiteSpeedcPanel Plugin