U.S. CISA adds Cisco Catalyst and LiteSpeed cPanel plugin flaws to its Known Exploited Vulnerabilities catalog

CISA has added two vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-20262 (Cisco Catalyst SD‑WAN Manager arbitrary file write via improper upload validation, requiring valid low‑privileged credentials) and CVE-2026-54420 (LiteSpeed cPanel plugin symlink following enabling escalation to root). The LiteSpeed flaw is actively exploited in the wild; advisories include log‑search detection commands, recommended upgrades (LiteSpeed WHM Plugin v5.3.2.1 / cPanel plugin v2.4.8+), and federal remediation deadlines of June 18 and June 29, 2026.