一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-54420 [HIGH] [在野] – LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.

未分类
📑 文章目录

LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026.