What is CVE-2026-5638?

CVE-2026-5638 is a medium-severity vulnerability in Heriklyma Cppwebframework, classified under Path Traversal. CVSS score: 5.3/10. Published 2026-04-06.

How severe is CVE-2026-5638?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Path Traversal in Heriklyma Cppwebframework

CVE-2026-5638

A vulnerability was detected in HerikLyma CPPWebFramework up to 3.1. This issue affects some unknown processing. Performing a manipulation results in path traversal. Remote exploitation of the attack is possible. The exploit is now public…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.001 (21.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R.

Affected products

Heriklyma Cppwebframework — versions 3.0, 3.1

Weakness classification (CWE)

CWE-22 — Path Traversal

References

VDB-355426 | HerikLyma CPPWebFramework path traversal (vdb-entry)
VDB-355426 | CTI Indicators (IOB, IOC, TTP) (signature, permissions-required)
Submit #785952 | HerikLyma CPPWebFramework <= 3.1 (HTTP Server Header) Relative Path Traversal (third-party-advisory)
github.com/HerikLyma/CPPWebFramework/issues/40 (issue-tracking)
github.com/HerikLyma/CPPWebFramework/issues/40 (exploit, issue-tracking)
github.com/HerikLyma/CPPWebFramework/ (product)

Frequently asked questions

What is CVE-2026-5638?: CVE-2026-5638 is a medium-severity vulnerability in Heriklyma Cppwebframework, classified under Path Traversal. CVSS score: 5.3/10. Published 2026-04-06.
How severe is CVE-2026-5638?: Medium severity. CVSS v3 base score is 5.3 out of 10.