litespeed_cpanel_plugin vulnerabilities

CVEs whose affected-version data names the litespeed_cpanel_plugin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-48172Critical· 9.8CISA KEVPoC

4mo ago

LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026

LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsonapi_func=redisAble" /var/cpanel/logs /u…

▾ Hadallitespeedtech · litespeed_cpanel_pluginEPSS 1.0%via NVD