Login Request a demo
LW
Product
LiteSpeed Web Server
by litespeedtech · last CVE Sep 30, 2026
6
CVEs
0
On KEV
9.4
Max CVSS
1
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 2Medium 0Low 0
Severity
All severities6Critical1High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add LiteSpeed Web Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-93903
9.4
0%
Sep 30
LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case."
Affected: before 6.3.7 build 1
CVE-2025-54939
7.5
1%
Aug 1
LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak
Affected: before 6.3.4
CVE-2026-31386
7.2
1%
Mar 16
OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability
Affected: before 6.3.5
CVE-2012-4871
–
2%
Sep 6
Cross-site scripting (XSS) vulnerability in service/graph_html.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script…
Affected: 4.1.11
CVE-2010-2333
–
60%
Jun 18
LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt…
Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more
CVE-2004-0112
–
10%
Nov 23
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,…
Affected: 1.0.1
Showing 6