LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

[Starburst-David]

A critical vulnerability in LiteSpeed Web Server Enterprise could let a low-privilege website user gain root access on a shared-hosting server, cPanel warned in an advisory published on September 14.

On such servers, many customers' sites run on a single machine, and an attacker with one of those hosting accounts could exploit the flaw to access or alter other sites and the server itself, according to the advisory.

More of the article at:
https://thehackernews.com/2026/09/lites ... t-one.html

Published Date: Sep 15, 2026

Vulnerabilities has been mentioned in this article:
CVE-2026-54420 CVE-2026-48172