CVE-2026-93903
NoneCVSS
—
EPSS
0.3%
Published
Sep 30, 2026
CISA due date
—
The record
LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case."
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-118663 @hono/node-server allows running the Hono application on Node.js. CWE-174
- CVE-2026-118655 Echo is a Go web framework. CWE-174
- CVE-2026-111757 Hono is a Web application framework that provides support for any JavaScript runtime. CWE-174
- CVE-2026-75899 fast-uri is a URI parser for Node.js. CWE-174