Skip to content
OpenAdvisories

Product · openwrt

uhttpd

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-55614

    uhttpd vulnerable to HTTP request smuggling via case-sensitive Transfer-Encoding matching

    uhttpd is a small HTTP server. In unpatched repository snapshots, `client_parse_header()` in `client.c` lowercases header names but compares the `Transfer-Encoding` value to `chunked` using case-sensitive `strcmp`. A mixed-case transfer-coding token is accept…

    openwrt uhttpd
  • Medium 6.9
    CVE-2026-55613

    uhttpd: HTTP request smuggling via ubus POST body parse-error desync

    uhttpd is a small HTTP server. In unpatched repository snapshots, `uh_ubus_data_send()` in `ubus.c` can desynchronize HTTP request boundaries when a `POST /ubus` JSON body arrives in multiple TCP segments. An initial segment completing a JSON object sets `du-…

    openwrt uhttpd