LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

CVE-2026-54420 High CVSS 8.5 In-The-Wild Exploited
Beranda Advisories CVE-2026-54420

Ringkasan Kerentanan (Vulnerability Overview)

Rilis: 01 October 2026
LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.

Tindakan Mitigasi yang Wajib Diterapkan (Required Action)

Instruksi Keamanan untuk Pengelola TI / OPD
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Seluruh pengelola server dan aplikasi di lingkungan OPD Kabupaten Ciamis diimbau untuk segera mengaudit perangkat terdampak dan mengaplikasikan patch sebelum batas waktu mitigasi.

Produk & Versi Terdampak

Produk Versi Basis Batas Terdampak Status Keamanan
cPanel Plugin 2.3 2.4.8 AFFECTED

Threat Intelligence Matrix

CVE Identifier
CVE-2026-54420
Vendor / Project LiteSpeed
Produk Terdampak cPanel Plugin
Skor CVSS
8.5 / 10.0
Status Eksploitasi AKTIF (In-The-Wild)
Kampanye Ransomware Tidak Diketahui
Automatable (Wormable) Unknown
Dampak Teknis Total
Sumber Intelijen CISA KEV

Butuh Pendampingan Mitigasi?

Tim Ciamiskab-CSIRT siap mendampingi verifikasi kerentanan dan langkah pengamanan aset digital OPD Anda.

Lapor ke CSIRT WhatsApp Hotline CSIRT
CSIRT Assistant
Halo 👋 Ada yang bisa saya bantu? Jika perlu, chat ini bisa diteruskan ke admin.
Scroll