Vulnerabilidades en litespeedtech
10 resultadosAnálisis Vexday
LiteSpeed Technologies apresenta footprint modesto de 7 CVEs, sem registro de exploração ativa em campo (KEV), o que reduz a urgência operacional imediata. A fraqueza dominante é injeção de script (CWE-79), característica típica de produtos web, com apenas 1 vulnerabilidade publicada nos últimos 90 dias, sinalizando ritmo baixo de descobertas recentes.
CVE-2023-4372MEDIUMLiteSpeed Cache <= 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 16.8%CVE-2025-54939MEDIUMLiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.EPSS 0.8%CVE-2025-24947MEDIUMA hash collision vulnerability (in the hash table used to manage connections) in LSQUIC (aka LiteSpeed QUIC) before 4.2.0 allows remote attaEPSS 0.7%CVE-2026-3375HIGHLiteSpeed Cache <= 7.7 - Unauthenticated Stored Cross-Site Scripting via QUIC.cloud CCSS/UCSS REST API EndpointsEPSS 0.4%CVE-2025-12450MEDIUMLiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2026-76579MEDIUMLiteSpeed Cache <= 7.9 - Reflected Cross-Site Scripting via ESI 'esi' ParameterEPSS 0.4%CVE-2026-18978HIGHLiteSpeed Cache <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Comment ContentEPSS 0.4%CVE-2026-3129MEDIUMLiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag AttributesEPSS 0.3%CVE-2024-9169MEDIUMlitespeed cache <= 6.4.1 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-3246MEDIUMLiteSpeed Cache <= 6.2.0.1 - Cross-Site Request Forgery to Stored Cross-Site ScriptingEPSS 0.2%