HarborGuard / CVE
Back to search
HIGHCVE-2026-31386Published Modified CNA jpcert

CVE-2026-31386: OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability

OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privilege.

Metrics

CVSS v4.0
8.6
Severity
HIGH
Fixed in
—
Affected Products
2
Affected packages
  • LiteSpeed Technologies / OpenLiteSpeed
    all versions
  • LiteSpeed Technologies / LSWS Enterprise
    all versions
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References