CVE-2026-48172 CRITICAL

LiteSpeed cPanel Plugin Vulnerability
Generated: 10 Oct 2026 19:57 • CVE Threat Intelligence

Description

LiteSpeed cPanel Plugin contains privilege escalation vulnerability that is exposed via the user-end cPanel plugin, which can be abused by any cPanel user account to execute arbitrary scripts with root privileges.

9.8
CVSS CRITICAL

Details

Published
26 May 2026 00:00
Modified
N/A
Source
CIRCL
Vendor
LiteSpeed
Product
cPanel Plugin
Fix Version
Vendor Patch / Mitigation Available