Litespeedtech Openlitespeed vulnerabilities

• litespeed technologies openlitespeed OpenLiteSpeed through 1.9.4 mTLS Bypass via HTTP/3 SNI and Host Mismatch CVE-2026-119559 8.2 HighOctober 30, 2026
• litespeed technologies openlitespeed OpenLiteSpeed before 1.9.3 Local Privilege Escalation via lsup.sh Auto-Update CVE-2026-104474 5.4 MediumOctober 2, 2026
• litespeed technologies lsws enterprise, openlitespeed, litespeedtech litespeed web server +2 more OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command... CVE-2026-31386 8.6 HighMarch 16, 2026
• litespeedtech lsquic, litespeed web adc, litespeed web server +1 more +3 more LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak. CVE-2025-54939 Public exploit 5.3 MediumAugust 1, 2025
• litespeedtech openlitespeed OpenLiteSpeed before 1.8.1 mishandles chunked encoding. CVE-2024-31617 5.3 MediumMay 22, 2024
• litespeedtech openlitespeed LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers. CVE-2023-40518 7.5 HighAugust 14, 2023
• litespeed technologies web server, openlitespeed web server, litespeedtech openlitespeed +2 more Privilege Escalation in OpenLiteSpeed Web Server CVE-2022-0074 8.8 HighOctober 27, 2022
• litespeed technologies web server, openlitespeed web server, litespeedtech openlitespeed +2 more Authenticated Remote Code Execution in OpenLiteSpeed Web Server CVE-2022-0073 8.8 HighOctober 27, 2022
• litespeed technologies web server, openlitespeed web server, litespeedtech openlitespeed +2 more Directory Traversal in OpenLiteSpeed Web Server CVE-2022-0072 5.8 MediumOctober 27, 2022
• litespeedtech openlitespeed Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows... CVE-2021-26758 8.8 HighApril 7, 2021
• litespeedtech openlitespeed The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as... CVE-2020-5519 9.8 CriticalJanuary 6, 2020
• litespeedtech openlitespeed The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a denial of... CVE-2018-19792 6.7 MediumDecember 3, 2018
• litespeedtech openlitespeed The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests for... CVE-2018-19791 6.5 MediumDecember 3, 2018
• litespeedtech openlitespeed Use-after-free vulnerability in Open Litespeed before 1.3.10. CVE-2015-3890 7.5 HighSeptember 20, 2017