CVE-2026-48172: CRITICAL (CVSS 9.8), Actively Exploited (CISA KEV)

CRITICAL (CVSS 9.8), Actively Exploited (CISA KEV), EPSS 18.9%. LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsonapi_func=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2>/dev/null in Bash. If you get no output