Back to Feed
VulnerabilitiesMay 22, 2026

CVE-2026-48172: Critical LiteSpeed cPanel Plugin Flaw Exploited for Privilege Escalation https:/...

CVE-2026-48172, a critical flaw in LiteSpeed cPanel plugin, is exploited for privilege escalation.

Vendor Watch

Run LiteSpeed cPanel Plugin?

Get an email when a reviewed story names LiteSpeed cPanel Plugin, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works

Summary

A critical vulnerability, CVE-2026-48172, in the LiteSpeed cPanel plugin is being actively exploited. The flaw allows for privilege escalation, potentially granting attackers unauthorized access and control.

Indicators of Compromise

  • cve — CVE-2026-48172

Entities

LiteSpeed cPanel Plugin (product)cPanel (technology)