vulnerability
CISA warns of another cPanel plugin flaw exploited in attacks
Critical
Summary
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about a critical vulnerability (CVE-2026-48172) in the LiteSpeed cPanel user-end plugin, which is currently being actively exploited. This flaw allows attackers to gain root access to shared hosting servers, posing a significant risk to government agencies and organizations using cPanel. CISA has mandated immediate patching to mitigate the threat.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data