Log in Start free

Hiawatha

Products

ProductCVEsExploitedLatest
Hiawatha Web server3–Jan 26, 2026

Exploited and recent CVEs

  • CVE-2025-57784 Medium 4.0 Tomahawk authentication timing attack due to usage of 'strcmp' 0.2%
  • CVE-2025-57785 Medium 6.5 Double free in XSLT in 'show_index' 0.4%
  • CVE-2025-57783 Medium 5.3 Improper header parsing may lead to request smuggling 0.5%