MSRXMSRXSecurity
Vulnerabilities / CVE-2026-93903

CVE-2026-93903

Published 2026-09-30 · Awaiting Analysis

CVE-2026-93903

9.4 CRITICAL
CVSS 4.0 · CNA · mitre.org
0.3%
chance of exploitation in the next 30 days (EPSS; higher than 17% of CVEs)

LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case."

Scores

Affected products

  • litespeedtech LiteSpeed Web Server: < 6.3.7 build 1

Weakness: CWE-174

3 references (advisories, patches, write-ups)

Sources: NVD, CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.

Look up another CVECheck your dependenciesScan a website