CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-05-21
LiteSpeed User-End cPanel Plugin Privilege Escalation Vulnerability (CVE-2026-48172) Security Advisory
[Affected Scope] LiteSpeed User-End cPanel Plugin versions prior to 2.4.5
[Impact] Unauthenticated remote attackers can escalate privileges (potentially to root) by exploiting improper handling of Redis features, with active exploitation observed in the wild.
[Mitigation] Immediately upgrade the plugin to the recommended minimum version of 2.4.7 or higher and perform IoC scanning using the provided command.