Skip to content
OpenAdvisories

Product · openwrt

uhttpd

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-55612

    uhttpd vulnerable to HTTP request smuggling via invalid chunk-length state reset

    uhttpd is a small HTTP server. In unpatched repository snapshots, `client_poll_post_data()` in `client.c` consumes an invalid chunk-length line, such as a size exceeding INT_MAX, then clears `r->content_length` and `r->transfer_chunked` without draining the r…

    openwrt uhttpd