Feed›Vulnerability›CISA orders federal agencies to patch actively exploited cPa...
VulnerabilityCyber Insider
9.8 — CRITICAL

CISA orders federal agencies to patch actively exploited cPanel plugin flaw within 4 days

📅 27 May 2026 at 22:58 UTC📰 Cyber InsiderView original source ↗
CISA orders federal agencies to patch actively exploited cPanel plugin flaw within 4 days

The US Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch a critical vulnerability in the LiteSpeed cPanel plugin that is being actively exploited in attacks. The flaw, tracked as CVE-2026-48172, affects the LiteSpeed cPanel user-end plugin and can allow attackers to execute arbitrary scripts with root privileges due to an improper … The post CISA orders federal agencies to patch actively exploited cPanel plugin flaw within 4 days appeared first on CyberInsider.

🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview

The US Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch a critical vulnerability in the LiteSpeed cPanel plugin due to active exploitation, which can allow attackers to execute arbitrary scripts with root privileges.

⚙️Technical Details
CVEs
CVE-2026-48172
Affected Systems
Litespeedtech Litespeed Cpanel PluginLitespeedtech Litespeed Whm PluginAttack Vectors: NETWORK
Attack Vectors
NETWORK
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Federal agencies and organizations using the affected plugin, with a high risk of exploitation due to ongoing attacks.
🛡️Recommended Actions
1Update the LiteSpeed cPanel plugin to version 2.4.5 or later
2Monitor server logs for indicators of compromise and block suspicious IP addresses associated with exploitation attempts
3Implement additional security measures, such as intrusion detection systems and network segmentation
📦Affected Products
Litespeedtech Litespeed Cpanel PluginLitespeedtech Litespeed Whm Plugin
🔐NVD Verified DataVERIFIED
CVE-2026-48172 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-266
Affected Products (CPE)
Litespeedtech Litespeed Cpanel PluginLitespeedtech Litespeed Whm Plugin

Read the full article

This is a curated summary. The complete article is available at Cyber Insider.

Read on Cyber Insider ↗
← Back to feed