Description

OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privilege.

Remediation

References

CVE-2026-31386

Related Vulnerabilities

WordPress Plugin Visitor Traffic Real Time Statistics Cross-Site Request Forgery (2.12)

WordPress Plugin LearnPress-WordPress LMS Multiple Vulnerabilities (3.0.12)

MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-9752)

phpBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-7143)

WebLogic CVE-2018-2902 Vulnerability (CVE-2018-2902)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2026-31386