NewsThe Hacker News
LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root
Affected vendors and products
More on LiteSpeed
Other advisories
- MediumCVE-2026-116763LiteSpeed Cache: Cross-Site-Scripting (XSS)
- MediumCVE-2026-109215LiteSpeed Cache: Cross-Site-Scripting (XSS)
- MediumCVE-2026-116763LiteSpeed Cache: Cross-Site-Scripting (XSS)
- MediumCVE-2026-109215LiteSpeed Cache: Cross-Site-Scripting (XSS)
- MediumCVE-2026-114190Hai Zheng / Lite Speed Cache LiteSpeed Cache: vertrauliche Informationen in übertragenen Daten
- MediumCVE-2026-114190Hai Zheng / Lite Speed Cache LiteSpeed Cache: vertrauliche Informationen in übertragenen Daten
- LowCVE-2026-113501LiteSpeed Cache: fehlende Autorisierung
- HighCVE-2026-113500LiteSpeed Cache: Cross-Site-Scripting (XSS)
Other news entries
- LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared ServerNewsThe Hacker News
- Joomla, LiteSpeed Vulnerabilities Exploited in AttacksNewsSecurityWeek
- CISA warns of another cPanel plugin flaw exploited in attacksNewsBleepingComputer
- CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege EscalationNewsThe Hacker News
- Recent KEV Additions: LiteSpeed cPanel Plugin, Cisco Catalyst SD-WAN Manager, and Splunk EnterpriseVulnerabilitySANS NewsBites
- LiteSpeed cPanel Plugin Privilege Escalation ExploitedVulnerabilitySANS NewsBites
- CISA gives feds 4 days to patch actively exploited cPanel plugin flawNewsBleepingComputer
- Root-Attacken auf Cisco Catalyst SD-WAN Manager und cPanel-Plug-in LiteSpeedNewsheise Security
Source: https://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.html
ID