CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
LiteSpeed User-End cPanel Plugin Privilege Escalation Vulnerability (CVE-2026-48172) Security Advisory
[Affected Scope] LiteSpeed User-End cPanel Plugin versions prior to 2.4.5
[Impact] Unauthenticated remote attackers can escalate privileges (potentially to root) by exploiting improper handling of Redis features, with active exploitation observed in the wild.
[Mitigation] Immediately upgrade the plugin to the recommended minimum version of 2.4.7 or higher and perform IoC scanning using the provided command.
Redis Debian Packaging Defect Lua Sandbox Escape and Remote Code Execution (CVE-2022-0543) Analysis and Mitigation Guide
[Affected Scope] Redis server instances installed via package managers (apt) on Debian, Ubuntu, and derived Linux distributions
[Impact] Unauthenticated remote attackers can bypass the Lua scripting sandbox to execute arbitrary system commands with the privileges of the Redis process (CVSS 10.0, CISA KEV Listed)
[Mitigation] Apply official OS package updates immediately, or disable EVAL/EVALSHA commands and restrict network access to localhost