Stable Host incident
Security Advisory: LiteSpeed Vulnerability (CVE-2026-48172)
Stable Host experienced a notice incident on May 21, 2026 affecting Amsterdam, NL and Frankfurt, DE and 1 more component, lasting 34d. The incident has been resolved; the full update timeline is below.
Affected components
Update timeline
- monitoring May 21, 2026, 10:47 PM UTC
A vulnerability identified as CVE-2026-48172 may impact customers utilizing LiteSpeed Web Server environments, shared hosting and unmanaged VPS hosting services. This issue primarily affects: - Web Hosting Servers (Shared Hosting) - Managed VPS - Unmanaged VPS that might be using LiteSpeed cPanel plugin. At this time: • Shared hosting systems are secured. • Managed VPS systems are secured. • No customer action is currently required for shared hosting accounts. • Unmanaged VPS customers with LiteSpeed cPanel Plugin may need to take action to patch or mitigate affected systems. The recommended course of action is as follows: • Verify LiteSpeed version • Apply vendor-provided security updates or mitigations • Contact Support if assistance is required
- monitoring Jun 24, 2026, 11:40 PM UTC
We are continuing to monitor for any further issues.
- resolved Jun 24, 2026, 11:40 PM UTC
This incident has been resolved.