LiteSpeed cPanel Plugin 0

Cybersecuritynews •Guru Baran • May 22, 2026

LiteSpeed has disclosed and patched a critical 0‑day privilege escalation flaw in its user-end cPanel plugin that is already being actively exploited to gain root access on Linux hosting servers. The bug is tracked as CVE‑2026‑48172 and affects LiteSpeed cPanel user-end plugin versions from v2.3 up to, but not including, v2.4.5. 0‑Day in LiteSpeed cPanel […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Zero-Day Vulnerability in LiteSpeed cPanel Plugin Actively Exploited A critical zero-day privilege escalation vulnerability in the LiteSpeed User-End cPanel plugin is being exploited in the wild, allowing authenticated cPanel users to execute arbitrary scripts as root. This flaw, tracked as CVE-2026-48172, has a maximum CVSS score of 10.0 and affects versions from v2.3 to below v2.4.5. The vulnerability was disclosed and patched on May 21, 2026, but active exploitation has been reported. Server administrators are urged to update their systems immediately to mitigate risks. The flaw enables full server control for attackers, posing a significant threat to Linux hosting environments. The situation remains critical as attackers may still be leveraging the unpatched versions. 17 sources 86

Extracted Entities

LiteSpeed cPanel Plugin 0

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)