[ Vendor · 3 CVEs ]
litespeedtech
CVEs affecting litespeedtech published in the last 30 days, plus any litespeedtech CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-115482 | 22 Oct 2026 | CVSS 7.5 | litespeedtech lsquicIn lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of buffered header sets is not limited, as… | |
| CVE-2026-104474 | 3 Oct 2026 | CVSS 6.7 | litespeedtech openlitespeedOpenLiteSpeed before 1.9.3 contains a local privilege escalation vulnerability in admin/misc/lsup.sh that runs unverified update packages from a… | |
| CVE-2026-93903 | 30 Sep 2026 | CVSS 9.4 | litespeedtech LiteSpeed Web ServerLiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case." |