What’s Vulnerable › Products

LiteSpeed Technologies OpenLiteSpeed vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your LiteSpeed Technologies OpenLiteSpeed version is affected

Latest LiteSpeed Technologies OpenLiteSpeed vulnerabilities

• CVE-2026-104474 — OpenLiteSpeed before 1.9.3 Local Privilege Escalation via lsup.sh Auto-Update (CVSS 6.7)
• CVE-2026-31386 — (CVSS 8.6)
• CVE-2021-47855 — Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting (CVSS 7.2)
• CVE-2025-54939 — (CVSS 7.5)
• CVE-2024-31617 — (CVSS 5.3)
• CVE-2023-40518 — (CVSS 7.5)
• CVE-2022-0074 — Privilege Escalation in OpenLiteSpeed Web Server (CVSS 8.8)
• CVE-2022-0073 — Authenticated Remote Code Execution in OpenLiteSpeed Web Server (CVSS 8.8)
• CVE-2022-0072 — Directory Traversal in OpenLiteSpeed Web Server (CVSS 5.8)
• CVE-2021-26758 — (CVSS 8.8)
• CVE-2020-5519 — (CVSS 9.8)
• CVE-2018-19792 — (CVSS 6.7)
• CVE-2018-19791 — (CVSS 6.5)
• CVE-2015-3890 — (CVSS 7.5)