Threat database

12 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.2	EPSS 0.3%	CVE-2026-84761LiteSpeed Cache · Server-Side Request Forgery (SSRF) High7.2EPSS 0.3%2026-09-03CVE Database V5CVE-2026-84761 Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions. EPSS 0.3%Vulnerability LiteSpeed Technologies #cwe-918	CVE Database V5	2026-09-03
High	8.5	KEVEPSS 0.8%	CVE-2026-54420cPanel Plugin · UNIX Symbolic Link (Symlink) Following High8.5KEVEPSS 0.8%2026-06-14CVE Database V5CVE-2026-54420 LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026. KEVEPSS 0.8%Vulnerability LiteSpeed Technologies #cwe-61	CVE Database V5	2026-06-14
Critical	10.0	KEVEPSS 1.0%	CVE-2026-48172cPanel Plugin · Incorrect Privilege Assignment Critical10.0KEVEPSS 1.0%2026-05-21CVE Database V5CVE-2026-48172 LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsonapi_func=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2>/dev/null in Bash. If you get no output, you have not been hit with exploitation of the vulnerability. If there is output, we recommend you examine the IP addresses in the list, determine if they are valid IP addresses, and if not, block them. To determine damage done, examine the system logs for use by the detected IP addresses. The issue is related to mishandling of Redis enable/disable features. The recommended minimum version is 2.4.7. KEVEPSS 1.0%Vulnerability LiteSpeed Technologies #cwe-266	CVE Database V5	2026-05-21
High	7.2	EPSS 2.2%	CVE-2026-31386OpenLiteSpeed · OS Command Injection High7.2EPSS 2.2%2026-03-16CVE Database V5CVE-2026-31386 OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privilege. EPSS 2.2%Vulnerability LiteSpeed Technologies United States China+8	CVE Database V5	2026-03-16
Medium	6.5	EPSS 0.3%	CVE-2024-51915LiteSpeed Cache · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in LiteSpeed… Medium6.5EPSS 0.3%2026-02-20CVE Database V5CVE-2024-51915 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through <= 6.5.2. EPSS 0.3%Vulnerability LiteSpeed Technologies	CVE Database V5	2026-02-20
Medium	6.4	EPSS 0.3%	CVE-2025-47437LiteSpeed Cache · Server-Side Request Forgery (SSRF) Medium6.4EPSS 0.3%2025-09-09CVE Database V5CVE-2025-47437 Server-Side Request Forgery (SSRF) vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 7.0.1. EPSS 0.3%Vulnerability LiteSpeed Technologies	CVE Database V5	2025-09-09
High	8.1	EPSS 0.9%	CVE-2024-50550LiteSpeed Cache · Incorrect Privilege Assignment High8.1EPSS 0.9%2024-10-29CVE Database V5CVE-2024-50550 Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from n/a through <= 6.5.1. EPSS 0.9%Vulnerability LiteSpeed Technologies	CVE Database V5	2024-10-29
Critical	9.8	EPSS 82%	CVE-2024-44000LiteSpeed Cache · Insufficiently Protected Credentials Critical9.8EPSS 82%2024-10-20CVE Database V5CVE-2024-44000 Insufficiently Protected Credentials vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Authentication Bypass.This issue affects LiteSpeed Cache: from n/a through < 6.5.0.1. EPSS 82%Vulnerability LiteSpeed Technologies	CVE Database V5	2024-10-20
High	8.8	EPSS 0.6%	CVE-2024-47637LiteSpeed Cache · Relative Path Traversal High8.8EPSS 0.6%2024-10-16CVE Database V5CVE-2024-47637 Relative Path Traversal vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Path Traversal.This issue affects LiteSpeed Cache: from n/a through <= 6.4.1. EPSS 0.6%Vulnerability LiteSpeed Technologies	CVE Database V5	2024-10-16
Medium	6.5	EPSS 0.3%	CVE-2024-47373LiteSpeed Cache · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in LiteSpeed… Medium6.5EPSS 0.3%2024-10-05CVE Database V5CVE-2024-47373 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through <= 6.5.0.2. EPSS 0.3%Vulnerability LiteSpeed Technologies	CVE Database V5	2024-10-05
High	7.1	EPSS 1.4%	CVE-2024-47374LiteSpeed Cache · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in LiteSpeed… High7.1EPSS 1.4%2024-10-05CVE Database V5CVE-2024-47374 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through <= 6.5.0.2. EPSS 1.4%Vulnerability LiteSpeed Technologies	CVE Database V5	2024-10-05
Critical	9.8	MirageEPSS 68%	CVE-2024-28000LiteSpeed Cache · Incorrect Privilege Assignment Critical9.8MirageEPSS 68%2024-08-21CVE Database V5CVE-2024-28000 Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 6.3.0.1. MirageEPSS 68%Vulnerability LiteSpeed Technologies	CVE Database V5	2024-08-21

Showing 1–12 of 12 results