SECURITYMay 23 · 07:35 UTCTHE HACKER NEWS[email protected] (The Hacker News)

LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root

A critical security vulnerability (CVE-2026-48172) in LiteSpeed User-End cPanel Plugin is being actively exploited, allowing attackers to execute arbitrary scripts with root privileges due to incorrect privilege assignment.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned

LiteSpeed User-End cPanel PluginorganizationCVE-2026-48172topicCVSS score: 10.0topicincorrect privilege assignmenttopicarbitrary scriptstopicelevated permissionstopicroottopic

Spot something wrong with this article?Report a problem →

Forward this

Related Signal

Adjacent reporting

SECURITYApr 30 · 22:48 UTC
The Internet Is Falling Down- CPanel/WHM Authentication Bypass CVE-2026-41940
SECURITYApr 12 · 04:25 UTC
Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621
SECURITYMay 14 · 07:34 UTC
New Fragnesia Linux flaw lets attackers gain root privileges
SECURITYApr 28 · 16:15 UTC
GitHub RCE Vulnerability: CVE-2026-3854 Breakdown
SECURITYMay 9 · 18:59 UTC
"Dirty Frag" (CVE-2026-43284): The Second Linux Root Exploit in Eight Days
SECURITYMay 3 · 06:26 UTC
CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV