L
Vendor security profile2 actively exploited CVEs
litespeedtech
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical3
CISA KEV2
Public exploit3
Patch rate%13
Avg. CVSS7.7
12-month vulnerability rate
0
0
0
0
0
0
1
1
0
2
2
1
CVE KEV
CVE severity distribution
8toplam CVE
Critical3 (38%)
High2 (25%)
Medium3 (38%)
Patch and exploitation view
%13
Verified patch
%25
CISA KEV
%38
Public exploit
1Patch available
0Partial
1Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
5.4
CVE-2026-104474
OpenLiteSpeed before 1.9.3 Local Privilege Escalation via lsup.sh Auto-Update
L
Patch verifiedEPSS %0
9.4
CVE-2026-93903
Vulnerability in Litespeedtech LiteSpeed Web Server
L
Patch status unknownEPSS %0
4.7
CVE-2026-76579
LiteSpeed Cache <= 7.9 - Reflected Cross-Site Scripting via ESI 'esi' Parameter
L
Patch status unknownEPSS %0
6.4
CVE-2026-3129
LiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes
L
Patch status unknownEPSS %0
7.2
CVE-2026-18978
LiteSpeed Cache <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content
L
Patch status unknownEPSS %0
8.5
CVE-2026-54420 Actively exploited
Vulnerability in Litespeedtech Litespeed Cpanel Plugin
L
Patch status unknownEPSS %1
10.0
CVE-2026-48172 Actively exploited
Vulnerability in LiteSpeed Technologies cPanel Plugin
LT
WorkaroundEPSS %1
9.8
CVE-2024-28000
Vulnerability in Litespeedtech Litespeed Cache
L
Patch status unknownEPSS %68