CISA gives feds 4 days to patch actively exploited cPanel plugin flaw
Source Bleeping Computer
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 28 May 2026, 22:03 UTC
What to do
AI-suggested
LiteSpeed has released official security updates that address CVE-2026-48172. Users should immediately update the LiteSpeed cPanel user-end plugin to the latest version to remediate this vulnerability. CISA mandates U.S. federal agencies to patch by May 29, 2026, and urges all organizations to prioritize patching or apply vendor-recommended mitigations. Users can check for signs of exploitation by searching server logs for 'cpanel_jsonapi_func=redisAble' and block any suspicious IP addresses. If mitigation is unavailable, discontinuing use of the affected plugin is advised. Patch status is confirmed as fixed by the vendor.
Description
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S.federal agencies four days to secure their servers against a critical vulnerability in the LiteSpeed cPanel user-end plugin, which is actively being exploited in attacks. [...]