VulnerabilitiesMay 22, 2026
CVE-2026-48172: Critical LiteSpeed cPanel Plugin Flaw Exploited for Privilege Escalation https:/...
CVE-2026-48172, a critical flaw in LiteSpeed cPanel plugin, is exploited for privilege escalation.
Vendor Watch
Run LiteSpeed cPanel Plugin?
Get an email when a reviewed story names LiteSpeed cPanel Plugin, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works
Summary
A critical vulnerability, CVE-2026-48172, in the LiteSpeed cPanel plugin is being actively exploited. The flaw allows for privilege escalation, potentially granting attackers unauthorized access and control.
Indicators of Compromise
- cve — CVE-2026-48172
Entities
LiteSpeed cPanel Plugin (product)cPanel (technology)