OP
Product
openlitespeed
13
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 7Medium 5Low 0
Watch
Add openlitespeed to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-0074 | 8.8 | Oct 27 | Privilege Escalation in OpenLiteSpeed Web Server Affected: 1.6.15 before 1.7.16.1 |
| CVE-2022-0073 | 8.8 | Oct 27 | Authenticated Remote Code Execution in OpenLiteSpeed Web Server Affected: 1.7.0 through 1.7.16.1 |
| CVE-2021-26758 | 8.8 | Apr 7 | Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root terminal access and execute commands on the host system Affected: 1.7.8 |
| CVE-2025-54939 | 7.5 | Aug 1 | LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak Affected: before 1.8.4 |
| CVE-2023-40518 | 7.5 | Aug 14 | LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers Affected: before 1.7.18 |
| CVE-2015-3890 | 7.5 | Sep 20 | Use-after-free vulnerability in Open Litespeed before 1.3.10 Affected: before 1.3.10 |
| CVE-2026-31386 | 7.2 | Mar 16 | OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability Affected: through 1.9.0 |
Showing 7