CVE Watch—

CVE-2026-48172

LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

18.9%

p97

KEV

YES

May 26, 2026

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

18.9%EPSS · 30 days18.9%

2026-06-302026-07-17

KEV catalog record

Product

LiteSpeed / cPanel Plugin

Vulnerability

LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

Added to KEV

May 26, 2026

Remediate by

May 29, 2026

Known ransomware use

Summary description

LiteSpeed cPanel Plugin contains privilege escalation vulnerability that is exposed via the user-end cPanel plugin, which can be abused by any cPanel user account to execute arbitrary scripts with root privileges.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/ ; https://nvd.nist.gov/vuln/detail/CVE-2026-48172

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-54420—

66.3%

KEV—70LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability—