maximmasiutin

Products

ProductCVEsExploitedLatest
TinyWeb6–Mar 6, 2026

Exploited and recent CVEs

  • CVE-2026-29046 Critical 9.2 TinyWeb: HTTP Header Control Character Injection into CGI Environment 0.4%
  • CVE-2026-28497 Critical 9.3 TinyWeb: Integer Overflow in `_Val` (HTTP Request Smuggling) 0.5%
  • CVE-2026-27633 High 8.7 TinyWeb has Unbounded Content-Length Memory Exhaustion (DoS) 0.5%
  • CVE-2026-27630 High 8.7 TinyWeb vulnerable to Remote Denial of Service via Thread/Connection Exhaustion (Slowloris) 0.5%
  • CVE-2026-27613 Critical 10.0 CGI Parameter Injection (Bypass of STRICT_CGI_PARAMS and EscapeShellParam) 0.9%
  • CVE-2026-22781 Critical 10.0 TinyWeb CGI Command Injection 2.4%