Hiawatha-Webserver Hiawatha
3 CVEs affecting Hiawatha-Webserver Hiawatha. Latest disclosed: 2026-01-26. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-8358 | High | 8.1 | 2019-02-16 | In Hiawatha before 10.8.4, a remote attacker is able to do directory traversal if AllowDotFiles is enabled. |
CVE-2025-57783 | Medium | 5.3 | 2026-01-26 | Improper header parsing may lead to request smuggling has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to access… |
CVE-2025-57784 | Low | 3.3 | 2026-01-26 | Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows a local attacker to access the managem… |