CISA Adds LiteSpeed cPanel Plugin Vulnerability to KEV List Following Active Exploitation

CISA has added a critical LiteSpeed cPanel Plugin vulnerability, tracked as CVE-2026-54420, to its Known Exploited Vulnerabilities (KEV) catalog following evidence of active exploitation in the wild. The flaw affects shared hosting environments and poses a significant risk to servers running CloudLinux with CageFS isolation. The vulnerability is classified as a UNIX symbolic link (symlink) […] The post CISA Adds LiteSpeed cPanel Plugin Vulnerability to KEV List Following Active Exploitation appeared first on Cyber Security News.