LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root
Summary
A critical vulnerability, CVE-2026-48172, in the LiteSpeed User-End cPanel Plugin is actively being exploited. The flaw allows attackers to execute arbitrary scripts with root privileges by exploiting an incorrect privilege assignment.
IFF Assessment
FOE
This vulnerability allows attackers to gain elevated privileges and execute arbitrary code, posing a significant risk to systems and data.
Severity
9.8
Critical
Defender Context
This active exploitation of a critical vulnerability highlights the immediate need for administrators to patch or update the LiteSpeed User-End cPanel Plugin. Defenders should monitor systems for signs of unauthorized script execution or privilege escalation attempts related to this plugin.