CISA Warns LiteSpeed cPanel Plugin Vulnerability Is Being Exploited in Attacks

CISA has added CVE-2026-48172—a critical privilege escalation in the LiteSpeed cPanel plugin—to its KEV catalog, confirming active exploitation and mandating immediate remediation under BOD 22-01; the flaw allows any authenticated cPanel user to execute arbitrary scripts as root, placing shared hosting environments at high risk.