fevar54/CVE-2026-54420-LiteSpeed-Symlink-Exploit

PoC

PoC de CVE-2026-54420: explotacion via symlink en el plugin LiteSpeed de cPanel/WHM.

view exploit source poc_in_githubauthor fevar54published 2026-06-18catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-54420US	—OT critical	1.44% (73rd)	KEV	2026-06-14
LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.