HW
Product
Hiawatha Web server
by Hiawatha · last CVE Jan 26, 2026
3
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 1
Watch

Add Hiawatha Web server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-57785
6.5
0%
Jan 26
Double free in XSLT in 'show_index'
Affected: 11.47 through 10.8.2
CVE-2025-57783
5.3
0%
Jan 26
Improper header parsing may lead to request smuggling
Affected: 11.7 through 8.5
CVE-2025-57784
3.3
0%
Jan 26
Tomahawk authentication timing attack due to usage of 'strcmp'
Affected: 11.7 through 8.5
Showing 3