cybercrime.clubhttps://cybercrime.club/tags/cagefs/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usThu, 18 Jun 2026 23:13:11 -0400LiteSpeed cPanel Plugin CVE-2026-54420: A Symlink Trick That Escapes CageFS for Roothttps://cybercrime.club/posts/litespeed-cpanel-cve-2026-54420-cagefs-symlink-root-escalation/Thu, 18 Jun 2026 23:13:11 -0400https://cybercrime.club/posts/litespeed-cpanel-cve-2026-54420-cagefs-symlink-root-escalation/An actively-exploited symlink flaw in LiteSpeed's user-end cPanel plugin lets any tenant with FTP or web-shell access break out of CageFS and become root. CISA's federal patch deadline is today.vulnerability