Vulnerabilities / CVE-2026-93903
CVE-2026-93903
Published 2026-09-30 · Awaiting Analysis
CVE-2026-93903
9.4 CRITICAL
CVSS 4.0 · CNA · mitre.org
CVSS 4.0 · CNA · mitre.org
0.3%
chance of exploitation in the next 30 days (EPSS; higher than 17% of CVEs)
chance of exploitation in the next 30 days (EPSS; higher than 17% of CVEs)
LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case."
Scores
Affected products
- litespeedtech LiteSpeed Web Server: < 6.3.7 build 1
Weakness: CWE-174
3 references (advisories, patches, write-ups)
Sources: NVD, CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.