What’s Vulnerable › Products

CivetWeb vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your CivetWeb version is affected

Latest CivetWeb vulnerabilities

• CVE-2026-29035 — CivetWeb Heap/Stack Buffer Overflow via WebSocket permessage-deflate Decompression (CVSS 6.5)
• CVE-2026-5789 — Search path without quotes in CivetWeb (CVSS 7.8)
• CVE-2025-9648 — Denial of Service in CivetWeb (CVSS 8.7)
• CVE-2025-55763 — (CVSS 7.5)
• CVE-2020-27304 — (CVSS 9.8)
• CVE-2018-12684 — (CVSS 7.1)