{"uuid": "ff55865e-fad5-404d-bcf6-a10b5935559b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mmyezng4n623", "content": "CVE-2026-48172 (CVSS 10.0): any cPanel user can run scripts as root via the LiteSpeed plugin.\nCISA KEV added May 26. Active exploitation confirmed. \n\nUpdate to plugin version 2.4.5 now.\nFederal deadline June 16.\n\n#CyberSecurity #CISA #WebHosting", "creation_timestamp": "2026-05-29T11:00:05.240641Z"}