LiteSpeed Technologies OpenLiteSpeed

• CVE-2026-31386 High 7.2 OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privi 1.5%
• CVE-2021-47855 High 7.2 Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting 0.3%