P5 Verified

OpenLiteSpeed before 1.9.3 Local Privilege Escalation via lsup.sh Auto-Update

CVE-2026-104474. EPSS 0.00085 (percentile 0.00267), scored 2026-10-03. Fixed version: bf584c1b7cd6edd5dacfffaad477bcb67d65d732. Fixed version: 468523ce84388cea9ba6633c26517bc05b3e2bc1.

Summary source: template

CVE / CWE

CVE-2026-104474 /

Vendor / product

Unavailable / Unavailable

Severity

0.0

CVSS

Unavailable · CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N · osv

EPSS

0.00085 · percentile 0.00267 · 2026-10-03

KEV

no · added unavailable · due unavailable · ransomware use unavailable

Exploit signals

Signal evidence

Affected products

• Product unavailable · Fixed version: bf584c1b7cd6edd5dacfffaad477bcb67d65d732
• Product unavailable · Fixed version: 468523ce84388cea9ba6633c26517bc05b3e2bc1

Provenance

• OSV.dev · Source record · observed 2026-10-04 08:10:59.885464+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-104474.html