Security Advisory: LiteSpeed Web Server Heap Overflow

A heap buffer overflow was identified in LiteSpeed Web Server HTTP/2 handling. A crafted request could cause a crash or remote code execution.

Critical 2026-08-06

LiteSpeed AlmaLinux 9 CentOS 7

Affected Versions

6.0.4 and earlier

Patched Version

6.0.5

Default Update CMD

yum update -y

Fix Commands

CentOS 7

yum clean all
/usr/local/lsws/bin/lshttpd -v

dnf clean metadata
/usr/local/lsws/bin/lshttpd -v

A heap buffer overflow was identified in LiteSpeed Web Server HTTP/2 handling. A crafted request could cause a crash or remote code execution.

References

Security Advisories

Security: Privilege Escalation via Phusion Passenger’s Watchdog API

2026-09-08

Security: CVE-2026-41940 – cPanel & WHM / WP2 Security Update 04/28/2026

2026-09-08

Security: CSF Security Release – September 3rd, 2026

2026-09-08

Selecciona tu producto y sistema operativo para ver los comandos de corrección exactos que se aplican a ti.