Openwrt Uhttpd
3 CVEs affecting Openwrt Uhttpd. Latest disclosed: 2026-10-30. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-55612 | Low | 3.7 | 2026-10-30 | uhttpd is a small HTTP server. In unpatched repository snapshots, `client_poll_post_data()` in `client.c` consumes an invalid chunk-length line, such as a size… |
CVE-2026-55614 | | 2026-10-30 | uhttpd is a small HTTP server. In unpatched repository snapshots, `client_parse_header()` in `client.c` lowercases header names but compares the `Transfer-Enco… | |
CVE-2026-55613 | | 2026-10-30 | uhttpd is a small HTTP server. In unpatched repository snapshots, `uh_ubus_data_send()` in `ubus.c` can desynchronize HTTP request boundaries when a `POST /ubu… |