All 3 CVE vulnerabilities found in Hiawatha Web server, with AI-generated Chinese analysis, references, and POCs.
Vendor: Hiawatha
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-57784 | Tomahawk authentication timing attack due to usage of 'strcmp' | 7.7AI | HighAI | 2026-01-26 |
| CVE-2025-57785 | Double free in XSLT in 'show_index' | 9.8AI | CriticalAI | 2026-01-26 |
| CVE-2025-57783 | Improper header parsing may lead to request smuggling | 8.2AI | HighAI | 2026-01-26 |
All 3 known CVE vulnerabilities affecting Hiawatha Web server with full Chinese analysis, references, and POCs where available.