CISA has given federal agencies three days to address CVE-2026-48172, an actively exploited privilege escalation flaw in the LiteSpeed cPanel plugin that lets unauthenticated attackers gain root execution. The agency is also pressing private-sector organizations to install vendor updates immediately.
The vulnerability stems from an incorrect privilege assignment weakness that enables remote attackers with no privileges to execute arbitrary scripts with root privileges.
https://x.com/litespeedtech/status/2057479889930817601
CISA warned that this type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
Administrators should immediately audit logs with the provided grep command and update any LiteSpeed cPanel user-end plugin versions between v2.3 and v2.4.4 to block active exploitation attempts.
Tap a lens to see what this story means for you.
Reader-supported · The Brief
Liked this? The Brief brings you the whole day in tech, verified, every morning. Two minutes, free forever.
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Tesla revealed the production Cybercab at an Austin event on September 4, 2026, showcasing its unboxed manufacturing process and new hardware components. The two-seater autonomous vehicle uses a pure-vision system with a drag coefficient under 0.20 and omits any immediate plans for individual customer sales.
Tesla began public rides in its steering-wheel-free Cybercab in Austin this evening while NHTSA opened an Audit Query into the company’s determination that the vehicle meets existing federal safety standards. The review targets Tesla’s self-certification at a moment when the agency is revising eight rules for driverless cars and other robotaxi developers have secured exemptions.
Volkswagen's supervisory board has unanimously approved the Future Plan 2030, which includes an additional 50,000 job cuts worldwide to reach a total of around 100,000 and leaves four German plants without secured future vehicle production after 2031-2034. The move aims to reduce costs and improve competitiveness against Chinese rivals, with alternative uses for the factories to be examined by June 2027.
