Description

OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privilege.

Remediation

References

CVE-2026-31386

Related Vulnerabilities

WordPress Plugin Comments Like Dislike Security Bypass (1.1.3)

WordPress Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2016-10045)

WordPress Plugin Loco Translate Unspecified Vulnerability (2.5.4)

WordPress Plugin MailArchiver Cross-Site Scripting (2.10.1)

Joomla! Core 3.x.x Multiple Vulnerabilities (3.4.4 - 3.6.3)

Severity

High

Classification

CVE-2026-31386 CWE-138 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities