Login Request a demo
OP
Product
openlitespeed
by litespeedtech · last CVE Oct 2, 2026
13
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 1High 7Medium 5Low 0
Severity
All severities13Critical1High7Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add openlitespeed to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-104474
6.7
0%
Oct 2
OpenLiteSpeed before 1.9.3 Local Privilege Escalation via lsup.sh Auto-Update
Affected: before 1.9.3
CVE-2018-19792
6.7
0%
Dec 3
The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a denial of service (buffer overflow) or possibly have unspecified other impact by creating a…
Affected: through 1.4.41; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0
CVE-2018-19791
6.5
1%
Dec 3
The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests for byte sequences, allowing an attacker to amplify the response size by requesting the…
Affected: before 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +1 more
CVE-2022-0072
5.8
1%
Oct 27
Directory Traversal in OpenLiteSpeed Web Server
Affected: 1.6.5 through 1.6.20.1; 1.7.0 before 1.7.16.1; 1.5.11; 1.5.12
CVE-2024-31617
5.3
0%
May 22
OpenLiteSpeed before 1.8.1 mishandles chunked encoding
Affected: before 1.8.1
Showing 5