CVE-2026-48172 CISA KEV · Actively exploitedSuited to automated attack · CISA
Vulnerability in LiteSpeed Technologies cPanel Plugin
CVSS score
10.0
EPSS probability
%1.0
Risk score
0.2
Published
5 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user. The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported versions of cPanel & WHM. cPanel described the issue as a critical security vulnerability and said that an
Similar Vulnerabilities
9.8
CVE-2024-28000Vulnerability in Litespeedtech Litespeed Cache
Patch status unknown Public Exploits:9EPSS %68
8.5
CVE-2026-54420 Actively exploitedVulnerability in Litespeedtech Litespeed Cpanel Plugin
Patch status unknown Public Exploits:4EPSS %1
9.4
CVE-2026-93903Vulnerability in Litespeedtech LiteSpeed Web Server
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-48172"