{"uuid": "a66d1f19-f22d-4074-9720-491213114c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://t.me/thehackernews/9067", "content": "\ud83d\udea8 Active exploit: LiteSpeed cPanel root flaw.\n\nhttps://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.html\n\nCVE-2026-48172 is a CVSS 10.0 vulnerability in LiteSpeed User-End cPanel Plugin that lets any cPanel user run arbitrary scripts as root.\n\n\ud83d\udd38 Affected: v2.3\u20132.4.4\n\ud83d\udd38 Not affected: WHM plugin\n\ud83d\udd38 Fix: upgrade to WHM Plugin 5.3.1.0 with cPanel plugin v2.4.7+\n\ud83d\udd38 IOC: cpanel_jsonapi_func=redisAble", "creation_timestamp": "2026-05-23T07:43:09.000000Z"}