sign in--:--:--UTC

CVE-2026-48172

exploited in the wild☆ pin

CVSS

10.0

Reports

4

First seen

May 23, 2026

Last seen

Jun 16, 2026

Affected product

LiteSpeed cPanel user-end plugin versions before 2.4.8

Recent reports

CISA warns of actively exploited LiteSpeed cPanel plugin privilege escalation flaw

Bleeping ComputerJun 16, 2026 Critical

CISA Orders Federal Agencies to Patch Critical LiteSpeed cPanel Plugin Flaw Within 4 Days

Bleeping ComputerMay 27, 2026 High

CISA Adds CVE-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation to KEV Catalog

CISA AdvisoriesMay 26, 2026 Critical

LiteSpeed cPanel Plugin CVE-2026-48172 Actively Exploited for Privilege Escalation

The Hacker NewsMay 23, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans