Smallsrv Small HTTP Server
3 CVEs affecting Smallsrv Small HTTP Server. Latest disclosed: 2026-03-26. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-28994 | Critical | 9.8 | 2022-04-29 | Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request. |
CVE-2025-41368 | High | 8.1 | 2026-03-26 | Problem in the Small HTTP Server v3.06.36 service. An authenticated path traversal vulnerability in '/' allows remote users to bypass the intended restrictions… |
CVE-2025-41359 | High | 7.8 | 2026-03-26 | Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files (x86)\shttps… |