LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root
LiteSpeed's cPanel plugin (CVE-2026-48172, CVSS 10.0) is under active exploitation, allowing attackers to run arbitrary scripts as root. The flaw impacts plugin versions 2.3–2.4.4 and is patched in version 2.4.5 (bundled in WHM plugin 5.3.1.0). Users should upgrade or remove the plugin immediately.