Litespeedtech

    Dashboard / Vendors

    Products: 7
    Vulnerabilities: 49
    Known Exploited: 0
    5
    Critical Level Threats
    18
    High Level Threats
    25
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-93389

    LiteSpeed Cache <= 7.9.1 - Unauthenticated Sensitive Information Disclosure (WooCommerce Store API Cart/Checkout PII + Cart-Token) via Public REST Caching

    Last Modified: Nov 05, 2026
    Published: Nov 05, 2026

    CVE-2026-119559

    OpenLiteSpeed through 1.9.4 mTLS Bypass via HTTP/3 SNI and Host Mismatch

    Last Modified: Nov 05, 2026
    Published: Oct 30, 2026

    CVE-2026-116763

    LiteSpeed Cache <= 7.9.1 - Unauthenticated Stored Cross-Site Scripting via HTML Minifier Predictable Placeholder (md5(REQUEST_TIME) + two-pass str_replace)

    Last Modified: Oct 30, 2026
    Published: Oct 29, 2026

    CVE-2026-109215

    LiteSpeed Cache <= 7.9.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via VPI Image Attribute Re-Serialization

    Last Modified: Oct 30, 2026
    Published: Oct 29, 2026

    CVE-2026-115482

    Unbounded Header Buffers in LiteSpeed HTTP/3 Allow Memory Exhaustion via QPACK Amplification

    Last Modified: Oct 22, 2026
    Published: Oct 22, 2026
    Items Per Page
    Litespeedtech Vulnerabilities & Security CVEs | CVE-DB