CERT24U.S. CISA adds LiteSpeed cPanel Plugin flaw to its Known Exploited Vulnerabilities catalogLoading data…
CERT24Threat Observatory
Period

U.S. CISA adds LiteSpeed cPanel Plugin flaw to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the LiteSpeed User-End cPanel Plugin vulnerability CVE-2026-48172 to its Known Exploited Vulnerabilities (KEV) catalog. The flaw affects versions before 2.4.5, has a CVSS score of 10.0, and has been exploited in the wild.

← Back to intelligence

U.S. CISA adds LiteSpeed cPanel Plugin flaw to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the LiteSpeed User-End cPanel Plugin vulnerability CVE-2026-48172 to its Known Exploited Vulnerabilities (KEV) catalog. The flaw affects versions before 2.4.5, has a CVSS score of 10.0, and has been exploited in the wild.