{"uuid": "5440f51f-b6dc-456d-a2a2-a5f91abc3a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42634", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root\n\nA maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation in the wild.\n\nThe flaw, tracked as CVE-2026-48172 (CVSS score: 10.0), relates to an instance of incorrect privilege assignment that an attacker could abuse to run arbitrary scripts with elevated permissions.\n\n\"Any cPanel user (including an attacker or a compromised account) may\nhttps://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.html", "creation_timestamp": "2026-09-19T00:00:45.135679Z"}