LiteSpeed Technologies

Records22All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

LiteSpeed Technologies records in CISA KEV

TI-2026-39296 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability CRITICAL 96KEV 2026-06-15 TI-2026-35606 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability CRITICAL 100KEV 2026-05-26

Components

Products in the NVD configurations · select one to filter the records

Litespeed Web Server 2 records MEDIUM

Records

2 records in Litespeed Web Server · all components

TI-2007-05434 CVE-2007-5654 · GHSA-2qqv-pxvf-45vw

LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary…

MEDIUM 51

LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by reading PHP source code via requests for…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.41064 Published 2007-10-23 No fix listed CWE-200

TI-2005-03490 CVE-2005-3695 · GHSA-m4p8-5q7j-p73v

Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web…

LOW 24

Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01929 Published 2005-11-20 No fix listed

Open these records in search →

Critical	4
High	11
Medium	7
Low	0
No CVSS	0