What’s Vulnerable › Products
ESP32Async ESPAsyncWebServer vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your ESP32Async ESPAsyncWebServer version is affected
Latest ESP32Async ESPAsyncWebServer vulnerabilities
- CVE-2026-54571 — ESPAsyncWebServer: Integer overflow in multipart boundary parser causes denial of service (CVSS 8.7)
- CVE-2025-53094 — ESPAsyncWebServer Vulnerable to CRLF Injection in AsyncWebHeader.cpp (CVSS 8.7)