<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>VulnFeed.org: LiteSpeed cPanel Plugin</title><link>https://vulnfeed.org/</link><description>Every disclosure, as it lands. Critical-only feed available.</description><language>en</language><atom:link href="https://vulnfeed.org/feed/product/litespeed-cpanel-plugin.xml" rel="self" type="application/rss+xml"/><item><title>CVE-2026-54420: LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-54420/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-54420/</guid><pubDate>Mon, 15 Jun 2026 00:00:00 +0000</pubDate><description>LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.</description></item><item><title>CVE-2026-48172: LiteSpeed cPanel Plugin Privilege Escalation Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-48172/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-48172/</guid><pubDate>Tue, 26 May 2026 00:00:00 +0000</pubDate><description>LiteSpeed cPanel Plugin contains privilege escalation vulnerability that is exposed via the user-end cPanel plugin, which can be abused by any cPanel user account to execute arbitrary scripts with root privileges.</description></item></channel></rss>
