lighttpd
lighttpdcounted 2026-10-11 04:20 UTC
As of 2026-10-11, 68 903 hosts ran lighttpd with at least one known CVE on a service open at their latest check, across 124 versions with CVEs; 36 distinct CVEs.
Known CVEs on hosts running it
68 903hosts with known CVEs
36distinct CVEs
124versions with CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 1 353 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Versions with known CVEs
| Version | Hosts with CVEs | CVEs |
|---|---|---|
| 1.4.54 | 23 181 | 1 |
| 1.4.39 | 18 004 | 3 |
| 1.4.35 | 6 840 | 4 |
| 1.4.55 | 4 111 | 1 |
| 1.4.45 | 2 612 | 3 |
| 1.4.56 | 1 568 | 3 |
| 1.4.37 | 1 318 | 3 |
| 1.4.53 | 1 164 | 2 |
| 1.4.26 | 1 002 | 11 |
| 1.4.63 | 967 | 2 |
| 1.4.32 | 901 | 10 |
| 1.4.59 | 886 | 2 |
| 1.4.28 | 838 | 10 |
| 1.4.31 | 814 | 10 |
| 1.4.20 | 496 | 11 |
| 1.4.61 | 347 | 2 |
| 1.4.41 | 270 | 3 |
| 1.4.64 | 261 | 1 |
| 1.4.48 | 243 | 4 |
| 1.4.38 | 221 | 3 |
| 1.4.49 | 217 | 4 |
| 1.4.47 | 197 | 4 |
| 1.4.29 | 196 | 10 |
| 1.4.45.2 | 166 | 3 |
| 1.4.58 | 161 | 3 |
| 1.4.30 | 143 | 9 |
| 1.4.33 | 135 | 7 |
| 1.4.52 | 123 | 2 |
| 1.4.50 | 122 | 3 |
| 1.4.30-dev | 105 | 10 |
| 1.4.19 | 96 | 15 |
| 1.4.34 | 90 | 6 |
| 1.4.23 | 88 | 10 |
| 1.4.42 | 77 | 3 |
| 1.4.23-dev | 76 | 10 |
| 1.4.35-devel-180704m | 65 | 2 |
| 1.4.28-dev | 64 | 10 |
| 1.4.35-devel-173507m | 63 | 2 |
| 1.4.51 | 63 | 2 |
| 1.4.57 | 49 | 3 |
| 1.4.18 | 43 | 18 |
| 1.4.22 | 42 | 11 |
| 1.4.58-dev | 42 | 3 |
| 1.4.11 | 40 | 22 |
| 1.4.42-dev | 39 | 3 |
| 1.4.13 | 37 | 25 |
| 1.4.46 | 29 | 4 |
| 1.4.60 | 28 | 2 |
| 1.4.66 | 25 | 1 |
| 1.4.35-dev | 22 | 6 |
74 more versions
3 more versions were seen only in older observations.
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2019-11072 CRITICAL 9.8 | 37 352 |
| CVE-2018-19052 HIGH 7.5 | 35 844 |
| CVE-2018-25103 MEDIUM 5.3 | 34 438 |
| CVE-2022-22707 MEDIUM 5.9 | 33 572 |
| CVE-2015-3200 HIGH 7.5 | 12 238 |
| CVE-2014-2323 CRITICAL 9.8 | 5 398 |
| CVE-2014-2324 MEDIUM 5.0 | 5 398 |
| CVE-2013-4559 HIGH 7.6 | 5 143 |
| CVE-2013-4560 MEDIUM 5.0 | 5 143 |
| CVE-2022-41556 HIGH 7.5 | 4 356 |
| CVE-2013-4508 HIGH 7.5 | 4 314 |
| CVE-2011-4362 MEDIUM 5.0 | 3 274 |
| CVE-2022-30780 HIGH 7.5 | 1 836 |
| CVE-2012-5533 MEDIUM 5.0 | 1 724 |
| CVE-2010-0295 MEDIUM 5.0 | 990 |
| CVE-2008-4359 HIGH 7.5 | 231 |
| CVE-2008-4360 HIGH 7.5 | 231 |
| CVE-2008-4298 MEDIUM 5.0 | 231 |
| CVE-2008-1531 MEDIUM 4.3 | 231 |
| CVE-2008-1270 MEDIUM 5.0 | 135 |
| CVE-2008-0983 MEDIUM 5.0 | 132 |
| CVE-2007-3949 HIGH 8.3 | 82 |
| CVE-2007-4727 MEDIUM 6.8 | 82 |
| CVE-2007-3946 MEDIUM 6.4 | 82 |
| CVE-2007-3947 MEDIUM 5.8 | 82 |
| CVE-2007-3948 MEDIUM 4.3 | 82 |
| CVE-2007-3950 MEDIUM 4.3 | 82 |
| CVE-2013-1427 LOW 1.9 | 48 |
| CVE-2008-1111 MEDIUM 5.0 | 43 |
| CVE-2007-1870 HIGH 7.8 | 40 |
| CVE-2007-1869 MEDIUM 5.0 | 37 |
| CVE-2022-37797 HIGH 7.5 | 16 |
| CVE-2005-0453 MEDIUM 5.0 | 3 |
| CVE-2006-0814 MEDIUM 5.0 | 3 |
| CVE-2006-0760 LOW 2.6 | 3 |
| CVE-2025-12642 MEDIUM 6.9 | 1 |
Hosts: matches on services open at each host's latest check, over every version.