Integer overflow in Maximmasiutin Tinyweb

CVE-2026-28497

TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32. Prior to version 2.03, an integer overflow vulnerability in the string-to-integer conversion routine (_Val) allows an unauthenticated remote attacker to bypass Content-Leng…

Vulnerability class: Integer Overflow

EPSS: 0.002 (47.9th percentile) — read the EPSS interpretation.