LiteSpeed

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions5
First seenAug 28, 2026
Last mentioned8d ago

Timeline

5 articles · newest first

QPACK flaws can crash HTTP/3 servers via memory amplification

FoxIO released PoCs; quic-go, quiche, lsquic, and Wireshark are patched, while Bun, h3, and aioquic were not.

The Hacker NewsOct 22, 06:38 UTC · 8d agoVulnerabilityCVE-2025-64702 CVE-2026-12523 CVE-2025-139452 · 1 read

New Cpanel Vulnerability Allows Attackers to Access Other Users’ Accounts

cPanel patched a root privilege escalation and cross-tenant flaws in calendars, contacts, and WordPress databases.

Cyber Security NewsSep 23, 15:18 UTC · Sep 23, 2026VulnerabilityCVE-2026-68490 CVE-2026-87899 CVE-2026-87900+33 · 2 reads

Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator

Suspected Chinese-speaking operator breached Philippine nuclear research and naval supplier systems via ownCloud CVE-2023-49103 and WordPress CVE-2024-28000.

Security AffairsAug 29, 09:16 UTC · Aug 29, 2026Threat actorExploitedCVE-2024-280002 · 1 read

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

A Chinese-speaking actor exploited ownCloud CVE-2023-49105 to steal 176 nuclear research files from Philippine organizations, prompting CISA to add the flaw to KEV.

The Hacker NewsAug 28, 15:56 UTC · Aug 28, 2026Exploit / PoCExploitedCVE-2023-49105 CVE-2024-28000 CVE-2026-53362+14 · 2 reads

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

cPanel patched critical flaw CVE-2026-65643 letting authenticated hosting customers with addon or parked domain rights execute code as root and fully compromise servers.

The Hacker NewsAug 28, 09:45 UTC · Aug 28, 2026VulnerabilityCVE-2026-65643 CVE-2026-58048 CVE-2026-58047+31

Related CVEs

by mentions

CVE-2024-2800068%9.8
Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache
published Aug 21, 2024litespeedtech litespeed cache
CVE-2026-65643<1%8.7
Authenticated eval injection in cPanel enables root code execution
published Sep 1, 2026cPanel
CVE-2023-4910543%9.8
Improper Authentication in ownCloud Server Allows Unauthenticated File Access
published Nov 21, 2023ownCloud Server (owncloud/core)KEV
CVE-2026-67401<1%9.9
Authenticated SQL Injection in cPanel EmailTrack Leads to Root RCE
published Sep 9, 2026cPanel (WebPros) cPanelPoC ×5
CVE-2026-878999.4
Authenticated Privilege Escalation to Root RCE in cPanel & WHM
published Sep 23, 2026cPanel, L.L.C. cPanel & WHM
CVE-2026-58048<1%9.4
Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context
published Jul 31, 2026
CVE-2026-684908.2
CalDAV/CardDAV Permission Flaw in cPanel Lets Local Users Read Other Accounts' Data
published Sep 23, 2026cPanel (cPanel, L.L.C. / WebPros) cPanel & WHM (CalDAV/CardDAV calendar and contacts service)
CVE-2026-12523<1%7.5
Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by means of specially crafted HTTP/3 frames
published Jul 14, 2026cloudflare quiche
CVE-2026-58047<1%5.6
HTTP Smuggling in cPanel allows potential leak of credentials
published Jul 31, 2026
CVE-2025-13945<1%5.5
HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
published Dec 3, 2025wireshark wiresharkPoC ×2

Appears with

ZKTecovendor · 2
CISAorganization · 2
Philippine nuclear research bodyvictim · 2
ownCloudvendor · 2
cPanelvendor · 2
LiteSpeed Cacheproduct · 2
Hunt.ioorganization · 2
ZKTeco BioTimeproduct · 2
lsquicproduct · 1
CERT-PHorganization · 1
quic-goproduct · 1
LiteSpeed Enterpriseproduct · 1
cPanelproduct · 1
WebProsvendor · 1
cPanelorganization · 1
h3product · 1

Entities are extracted by the model from each article. First seen Aug 28, 2026, last mentioned 8d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.