Web hosts are scrambling to fix the bug under active attack by hackers. One company said hackers have been abusing the bug for months.
Attackers are actively exploiting a vulnerability in cPanel, the web-hosting control panel used by millions of websites ...
CISA added CVE-2026-54420 to KEV, requiring federal agencies to patch LiteSpeed cPanel root escalation by June 18, 2026.
Attackers are targeting Cisco Catalyst SD-WAN Manager and cPanel instances with the LiteSpeed plugin. However, attacks are ...
The popular cPanel web hosting server control panel software recently issued a patch to fix a critical flaw in the log4j Java library discovered in part of the software used for email. The ...
Threat actors are exploiting vulnerabilities in Joomla and the LiteSpeed cPanel plugin for code execution and privilege ...
Confirmed exploitation: CISA added CVE-2026-41940 to its Known Exploited Vulnerabilities list after confirming real-world attacks on vulnerable cPanel versions. Potential state actor: Private threat ...