CyberRota
← Ana sayfaya dön

CVE-2026-54420

HIGH · CVSS 8.5 EPSS %1.26 CISA KEV · Aktif istismar Public Exploit

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-06-14T04:16:28.630 · Çekilme zamanı: 2026-06-30T12:19:18.723574+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

Public Exploit Sinyali

Bu CVE için açıklama veya referanslarda public exploit / PoC / GitHub / Metasploit sinyali tespit edildi.

Tespit Edilen Sinyaller
exploit

Not: Bu bağlantılar yalnızca güvenlik araştırması ve doğrulama amacıyla listelenmiştir.

CISA KEV Bilgisi

Durum: Bu CVE, sahada aktif istismar edilmiş açıklar katalogunda yer alıyor.

Ransomware Kullanımı: Unknown

KEV Eklenme Tarihi: 2026-06-15

Önerilen Aksiyon: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

CVE
CVE-2026-54420
Severity
HIGH
CVSS
8.5
EPSS
%1.26
Linux

Orijinal NVD Açıklaması

LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026.