CERT24LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as RootLoading data…
CERT24Threat Observatory
Period

LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root

A maximum-severity vulnerability in the LiteSpeed User-End cPanel Plugin, CVE-2026-48172, is being actively exploited. The vulnerability allows any cPanel user, including an attacker or compromised account, to execute arbitrary scripts as root.

← Back to intelligence

LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root

A maximum-severity vulnerability in the LiteSpeed User-End cPanel Plugin, CVE-2026-48172, is being actively exploited. The vulnerability allows any cPanel user, including an attacker or compromised account, to execute arbitrary scripts as root.