Skip to content
OpenAdvisories

Vendor

CivetWeb

4 known vulnerabilities.

Products

CivetWeb 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-124040 Public exploit

    CivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo-Header State

    CivetWeb through 1.16, when built with USE_HTTP2 and enable_http2 on, contains a use-after-free vulnerability in handle_http2() that retains freed :method and :path pointers. Unauthenticated remote attackers can send a later HEADERS frame omitting these pseud…

    CivetWeb CivetWeb civetweb civetweb Debian Ubuntu