CVE-2026-93903

LiteSpeed Web Server versions prior to 6.3.7 build 1 are vulnerable due to improper validation of internal redirect URLs, which could be exploited to conduct unauthorized actions or access sensitive information. This critical vulnerability, rated 9.4 on the CVSS scale, poses a significant risk to web applications relying on LSWS for their operations. Organizations using affected versions should prioritize immediate updates to mitigate potential exploitation.