LiteSpeed cPanel Plugin Privilege Escalation (CVE-2026-48172)

Georg Lauenstein@gsec

•updated May 31, 2026•0•0•4

Detects exploitation attempts of CVE-2026-48172 in the LiteSpeed User-End cPanel Plugin. Attackers abuse the redisAble function to escalate privileges, potentially to root, by mishandling Redis enable/disable features.