CISA: LiteSpeed cPanel flaw allows root escalation — update now

Colleagues — security alert: CISA added CVE-2026-54420 (LiteSpeed cPanel plugin) to KEV. A user with FTP or a web shell can escalate to root on shared hosting under CloudLinux/CageFS (CVSS 8.5).

Check: grep the LiteSpeed log pattern indicated by vendor — no output = likely unaffected. Look for the generateEcCert→packageUserSize chain and 7–10 parallel invocations.

Action: update to LiteSpeed WHM Plugin v5.3.2.1 (cPanel plugin v2.4.8+). For government agencies, deadline is 18 June 2026.

Why it matters: root on shared hosts jeopardizes client data and your infrastructure.

How do you plan to detect and patch such components?

#cybersecurity #patchmanagement #infosec #servers