litespeedtech litespeed web server

Name: litespeedtech litespeed web server
Brand: litespeedtech

productUS

cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical1high3medium0low

updated 2026-10-27

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2010-2333US	medium5.0	60.2% (99th)	Exploit	no fix	2010-06-18	15 versions
CVE-2012-4871US	medium4.3	1.63% (76th)	Exploit	no fix	2012-09-06	= 4.1.11
CVE-2025-54939US	high7.5	0.80% (56th)	Exploit	6.3.4	2025-08-01	< 6.3.4
CVE-2004-0112US	medium5.0	10.4% (96th)	—	no fix	2004-11-23	= 1.0.1
CVE-2026-31386US	—	1.44% (73rd)	—	6.3.5	2026-03-16	< 6.3.5

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-401Missing Release of Memory after Effective Lifetime1 CVEs
CWE-770Allocation of Resources Without Limits or Throttling1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.