CVE-2024-28000

CRITICAL9.8Published on August 21, 2024

Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache: from n/a through <= 6.3.0.1.

Early warning: exploitation observed

Exploitation observed since Aug 21, 2024
Not yet in the official CISA catalogue
Attacked 1 day before the vulnerability was made public
Confirmed by sensors, not only by reports

Source: VulnCheck KEV · Apr 23, 2026 Sep 25, 2025 Aug 21, 2024

CVSS score9.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-266

Vendorslitespeedtech

Affected products

Vendors	Prodotto	Versioni
litespeedtech	litespeed cache	< 6.4

Una falla di ownCloud ha permesso il furto di dati nucleari filippini: la CISA la inserisce nel KEV

APT

An ownCloud flaw allowed theft of Philippine nuclear data: CISA adds it to KEV

On August 27, 2026, CISA added three new vulnerabilities to the Known Exploited Vulnerabilities KEV catalog. The most severe is CVE-2023-49105, an

Aug 29, 20265 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Early warning: exploitation observed

Affected products

Related articles

An ownCloud flaw allowed theft of Philippine nuclear data: CISA adds it to KEV