Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
LXCenter records in CISA KEVNo LXCenter vulnerabilities are listed in CISA KEV.
Priority HIGH 82
An unauthenticated SQL injection vulnerability exists in the Kloxo web hosting control panel (developed by LXCenter) prior to version 6.1.12.
CVSS 4.0CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01183 · Published 2025-07-31 · Fixed in 6.1.12 CWE-89
Priority HIGH 72
Kloxo versions 6.1.12 and earlier contain two setuid root binaries—lxsuexec and lxrestart—that allow local privilege escalation from uid 48.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00474 · Published 2025-08-01 · No fix listed CWE-269
Open these records in search →