As cited
Copy frozen at (site build).
vulnerabilities
LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server
A critical vulnerability in LiteSpeed Web Server Enterprise allows a low-privilege website user to gain root access on shared-hosting servers where multiple customer sites run on a single machine. An attacker with one hosting account could exploit the flaw to access or modify other sites and the underlying server. cPanel published an advisory on September 14, 2026 describing the issue.
Why it matters: Shared-hosting providers and their customers are at risk of complete server compromise and lateral movement between accounts; vendors using LiteSpeed Enterprise should patch immediately and assess whether customers have been affected.
- Source published
- First seen by Cybersecurity Tracker