TI-2026-23945 CVE-2026-31386 · GHSA-3gr9-8p27-7f3p
OS command injection in LiteSpeed Technologies OpenLiteSpeed
Priority MEDIUM 42
OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability.
Vulnerabilities
12 records
TI-2025-34659 CVE-2025-54939 · GHSA-839r-7hhg-xhqr
LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.
Priority LOW 34
LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.
TI-2024-20896 CVE-2024-31617 · GHSA-5wp7-92wc-c55h
OpenLiteSpeed before 1.8.1 mishandles chunked encoding.
Priority LOW 30
OpenLiteSpeed before 1.8.1 mishandles chunked encoding.
TI-2023-21334 CVE-2023-40518 · GHSA-qg79-g97j-8qg5
LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers.
Priority MEDIUM 40
LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers.
TI-2022-00031 CVE-2022-0074 · GHSA-p85c-c374-mg9g
Privilege Escalation in OpenLiteSpeed Web Server
Priority MEDIUM 41
Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation.
TI-2022-00030 CVE-2022-0073 · GHSA-p42f-x6hp-xv84
Authenticated Remote Code Execution in OpenLiteSpeed Web Server
Priority HIGH 73
Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection.
TI-2022-00029 CVE-2022-0072 · GHSA-f532-g5cf-vhjp
Directory Traversal in OpenLiteSpeed Web Server
Priority LOW 28
Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal.
TI-2021-08426 CVE-2021-26758 · GHSA-9f37-v7ww-2cmh
Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8…
Priority MEDIUM 43
Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root terminal access and execute commands on the host system.
TI-2020-04489 CVE-2020-5519 · GHSA-88rm-g49p-m632
The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs…
Priority MEDIUM 44
The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration > External App" screen.
TI-2018-14015 CVE-2018-19792 · GHSA-8jp3-8rhj-499h
The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a…
Priority LOW 30
The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a denial of service (buffer overflow) or possibly have unspecified other impact by creating a symlink through which the openlitespeed pro…
TI-2018-14014 CVE-2018-19791 · GHSA-p7xx-c3fx-mhqh
The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests…
Priority LOW 31
The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests for byte sequences, allowing an attacker to amplify the response size by requesting the entire response body repeatedly, as demons…
TI-2015-03304 CVE-2015-3890 · GHSA-7qpw-4747-ch6g
Use-after-free vulnerability in Open Litespeed before 1.3.10.
Priority LOW 35
Use-after-free vulnerability in Open Litespeed before 1.3.10.