What’s Vulnerable › Vulnerabilities

CVE-2025-57783: Improper header parsing may lead to request smuggling

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-26 · updated 2026-06-17

Description

Improper header parsing may lead to request smuggling has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to access restricted resources managed by Hiawatha webserver.

Affected products

• Hiawatha Web server: 11.7

References

• https://gitlab.com/hsleisink/hiawatha/-/blame/master/src/http.c?ref_type=heads#L205

Get alerted when CVE-2025-57783 or the next vulnerability affects your stack