CVE-2026-93903

Description

LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case."

References

• https://docs.litespeedtech.com/lsws/changelog/#v6-3-7-build-1
• https://www.litespeedtech.com/products/litespeed-web-server/release-log