Skip to content
OpenAdvisories

Vendor

CivetWeb

4 known vulnerabilities.

Products

CivetWeb 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-29035

    CivetWeb Heap/Stack Buffer Overflow via WebSocket permessage-deflate Decompression

    CivetWeb (commit 4a4f0c95) contains a heap and stack buffer overflow vulnerability in the read_websocket() function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USE_ZLIB and MG_EXPERIMENTAL_IN…

    CivetWeb CivetWeb civetweb Debian