VYPR
← All advisories
High severity7.2NVD Advisory· Published Mar 16, 2026· Updated Jun 8, 2026

CVE-2026-31386

CVE-2026-31386

Description

OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privilege.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Litespeedtech/Web Server
    cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*
    Range: <6.3.5
  • Litespeedtech/Openlitespeed3 versions
    cpe:2.3:a:litespeedtech:openlitespeed:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:litespeedtech:openlitespeed:*:*:*:*:*:*:*:*range: <=1.9.0
    • (no CPE)
    • (no CPE)range: all versions
  • Litespeedtech/LSWS Enterprisellm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: all versions

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.