Firetruck

CVE-2026-48172

KEV
Updated Oct 7, 2026 · PUBLISHED
View KEV entry →

Description

LiteSpeed cPanel Plugin contains privilege escalation vulnerability that is exposed via the user-end cPanel plugin, which can be abused by any cPanel user account to execute arbitrary scripts with root privileges.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
WHM Plugin/cPanel PluginLiteSpeed Technologies / WHM Plugin>= 0, < 5.3.1.0affected
WHM Plugin/cPanel PluginLiteSpeed Technologies / cPanel Plugin>= 2.3, < 2.4.7affected