CVE-2025-57783

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Improper header parsing may lead to request smuggling has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to access restricted resources managed by Hiawatha webserver.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jan 26, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-577843.3Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows a local attacker toCVE-2025-577856.5A Double Free in XSLT `show_index` has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to corrupCVE-2025-577865.4A reflected cross-site scripting (xss) vulnerability exists in the notifynewstudy functionality of MedDream PACS Premium 7.3.6.870. A speciaCVE-2025-577876.1A reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A speciallyCVE-2025-577886.5A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. RBAC heCVE-2025-577895.4During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain CVE-2025-57797.5A vulnerability has been found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this vulnerabilCVE-2025-577908.8A security vulnerability has been identified that allows remote attackers to perform unauthorized file system access through a path traversaCVE-2025-577916.5A security vulnerability has been identified that allows remote attackers to inject or manipulate command-line arguments passed to internal CVE-2025-5779210.0Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user input in a web applCVE-2025-577938.6Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user-supplied input in aCVE-2025-577949.1Explorance Blue versions prior to 8.14.9 contain an authenticated unrestricted file upload vulnerability in the administrative interface. Th
CVE-2025-57783: Medium severity, CVSS 5.3 | Vulnix