LT
Vendor
LiteSpeed Technologies
14
CVEs
3
On KEV
0
New 30D
Products
CP9.8
cPanel Plugin
LiteSpeed Technologies
2 CVEs2 on KEV0 new
WP9.8
WHM Plugin
LiteSpeed Technologies
1 CVEs1 on KEV0 new
LW8.8
LiteSpeed Web Server
LiteSpeed Technologies
5 CVEs0 on KEV0 new
OW8.8
OpenLiteSpeed Web Server
LiteSpeed Technologies
3 CVEs0 on KEV0 new
LC7.2
LiteSpeed Cache
LiteSpeed Technologies
1 CVEs0 on KEV0 new
LE7.2
LSWS Enterprise
LiteSpeed Technologies
1 CVEs0 on KEV0 new
OP7.2
OpenLiteSpeed
LiteSpeed Technologies
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-84761 | LC LiteSpeed Cache LiteSpeed Technologies | 7.2 | Sep 3 | WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability |
| CVE-2026-54420 In wildKEV | CP cPanel Plugin LiteSpeed Technologies | 8.5 | Jun 14 | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability |
| CVE-2026-48172 In wildKEV | CP cPanel Plugin LiteSpeed Technologies | 9.8 | May 21 | LiteSpeed cPanel Plugin Privilege Escalation Vulnerability |
| CVE-2026-31386 | OP OpenLiteSpeed LiteSpeed Technologies | 7.2 | Mar 16 | OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability |
| CVE-2022-0074 | OW OpenLiteSpeed Web Server LiteSpeed Technologies | 8.8 | Oct 27 | Privilege Escalation in OpenLiteSpeed Web Server |
| CVE-2022-0073 | OW OpenLiteSpeed Web Server LiteSpeed Technologies | 8.8 | Oct 27 | Authenticated Remote Code Execution in OpenLiteSpeed Web Server |
| CVE-2022-0072 | LW LiteSpeed Web Server LiteSpeed Technologies | 5.8 | Oct 27 | Directory Traversal in OpenLiteSpeed Web Server |
| CVE-2007-5654 | LW Litespeed Web Server Litespeed Technologies | – | Oct 23 | LiteSpeed Web Server before 3.2.4 allows remote attackers to trigger use of an arbitrary MIME type for a file via a "%00." sequence followed by a new extension, as demonstrated by… |
| CVE-2005-3695 | LW Litespeed Web Server Litespeed Technologies | – | Nov 20 | Cross-site scripting (XSS) vulnerability in admin/config/confMgr.php in LiteSpeed Web Server 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the m… |