CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor/product archive
2 CVEs tagged to litespeedtech / litespeed_cpanel_plugin — 1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.
LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hostin…
LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of gr…