CVE-2026-104474 | LiteSpeed Technologies OpenLiteSpeed up to 1.9.2 Autoupdate admin/misc/lsup.sh privileges management

October 3, 2026 Yanac

A vulnerability described as very critical has been identified in LiteSpeed Technologies OpenLiteSpeed up to 1.9.2. This affects an unknown part of the file admin/misc/lsup.sh of the component Autoupdate. The manipulation results in improper privilege management.

This vulnerability is known as CVE-2026-104474. Attacking locally is a requirement. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More