Security Advisory: LiteSpeed Vulnerability (CVE-2026-48172)

Incident Report for Hostek

Identified

A vulnerability identified as CVE-2026-48172 may impact customers utilizing LiteSpeed Web Server environments, including certain shared hosting and VPS hosting services.

This issue primarily affects:
• cPanel hosting (both Shared and VPS)
• WordPress Optimized hosting (both Shared and VPS)

At this time:
• Shared hosting systems are actively being secured by the Hostek engineering team.
• No customer action is currently required for shared hosting accounts.
• VPS customers with LiteSpeed installations may need to take action to patch or mitigate affected systems.

The recommended course of action is as follows:
• Verify LiteSpeed version
• Apply vendor-provided security updates or mitigations
• Contact Support if assistance is required

We are continuing to monitor the situation and will provide updates as additional information becomes available.

Posted May 21, 2026 - 17:41 UTC

This incident affects: Customer Support.