onyx

onyx --cves cve-2026-31386

CVE-2026-31386

HIGHLiteSpeed Web Server
score
<0.1
cvss
7.2
epss
2.2%
published
2026-03-16
kev added
—
first seen

LiteSpeed Technologies OpenLiteSpeed and LSWS Enterprise contain an OS command injection caused by improper input sanitization, letting attackers with administrative privileges execute arbitrary OS commands.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2026-03-16 — PublishedP2026-10-21 (seen by) — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 1.5%2026-09-23: epss 1.5%2026-09-24: epss 2.1%2026-09-25: epss 2.1%2026-09-26: epss 2.1%2026-09-27: epss 2.1%2026-09-29: epss 2.1%2026-09-30: epss 2.1%2026-10-01: epss 2.1%2026-10-02: epss 2.1%2026-10-03: epss 2.1%2026-10-04: epss 2.1%2026-10-05: epss 2.1%2026-10-06: epss 2.1%2026-10-07: epss 2.1%2026-10-08: epss 2.1%2026-10-09: epss 2.1%2026-10-10: epss 2.1%2026-10-11: epss 2.1%2026-10-12: epss 2.1%2026-10-13: epss 2.2%2026-10-14: epss 2.2%2026-10-15: epss 2.2%2026-10-16: epss 2.2%2026-10-18: epss 2.2%2026-10-19: epss 2.2%2026-10-20: epss 2.2%2026-10-21: epss 2.2%2.2%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-78

References 3