Hiawatha Hiawatha Web Server
3 CVEs affecting Hiawatha Hiawatha Web Server. Latest disclosed: 2026-01-26. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-57785 | Medium | 6.5 | 2026-01-26 | A Double Free in XSLT `show_index` has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to corrupt data which may le… |
CVE-2025-57783 | Medium | 5.3 | 2026-01-26 | Improper header parsing may lead to request smuggling has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to access… |
CVE-2025-57784 | Low | 3.3 | 2026-01-26 | Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows a local attacker to access the managem… |