sign in--:--:--UTC

CVE-2026-48172

exploited in the wild

CVSS

10.0

Reports

4

First seen

May 23

Last seen

Jun 16

Affected product

LiteSpeed cPanel user-end plugin versions before 2.4.8

Recent reports

CISA warns of actively exploited LiteSpeed cPanel plugin privilege escalation flaw

Bleeping ComputerJun 16 Critical

CISA Orders Federal Agencies to Patch Critical LiteSpeed cPanel Plugin Flaw Within 4 Days

Bleeping ComputerMay 27 High

CISA Adds CVE-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation to KEV Catalog

CISA AdvisoriesMay 26 Critical

LiteSpeed cPanel Plugin CVE-2026-48172 Actively Exploited for Privilege Escalation

The Hacker NewsMay 23

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans