Login Request a demo
HI
Product
Hiawatha
by Hiawatha-webserver · last CVE Jan 26, 2026
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 1Medium 1Low 1
Severity
All severities3Critical0High1Medium1Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Hiawatha to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-8358
8.1
1%
Feb 16
In Hiawatha before 10.8.4, a remote attacker is able to do directory traversal if AllowDotFiles is enabled
Affected: before 10.8.4
CVE-2025-57783
5.3
0%
Jan 26
Improper header parsing may lead to request smuggling
Affected: 11.7
CVE-2025-57784
3.3
0%
Jan 26
Tomahawk authentication timing attack due to usage of 'strcmp'
Affected: 11.7
Showing 3