What’s Vulnerable › Products

static-web-server vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your static-web-server version is affected

Latest static-web-server vulnerabilities

• CVE-2026-75601 — Static Web Server: Authentication bypass on /metrics endpoint when --basic-auth is enabled (CVSS 4.3)
• CVE-2026-27480 — Static Web Server: Timing-Based Username Enumeration in Basic Authentication (CVSS 5.3)
• CVE-2025-67487 — Static Web Server is vulnerable to symbolic link Path Traversal (CVSS 8.6)