Home / May 28, 2026 / Story
0
#2 BleepingComputer general May 27, 2026 at 10:06 UTC

CISA gives feds 4 days to patch actively exploited cPanel plugin flaw

By Sergiu Gatlan

AI Summary

CISA issued an emergency directive giving federal agencies just four days to patch a critical zero-day vulnerability in the LiteSpeed cPanel user-end plugin, which is actively being exploited to execute scripts with root privileges. The flaw was resolved the prior week but had already seen in-the-wild exploitation before a patch was available. Web hosting administrators running cPanel-based deployments should prioritize this patch immediately.

Relevance score: 87.0/100

# More from May 28