// CVE · PUBLISHED 2026-09-30
CVE-2026-93903
litespeedtech / LiteSpeed Web Server
9.4 · CVSS 4.0Critical
Description
LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case."
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.