Sstatic-web-server

Products

Exploited and recent CVEs

• CVE-2026-75601 Medium 4.3 Static Web Server: Authentication bypass on /metrics endpoint when --basic-auth is enabled 0.4%
• CVE-2026-27480 Medium 5.3 Static Web Server: Timing-Based Username Enumeration in Basic Authentication 0.4%
• CVE-2025-67487 Medium 5.5 Static Web Server is vulnerable to symbolic link Path Traversal 0.4%
• CVE-2024-32966 Medium 5.8 Stored Cross-site Scripting in directory listings via file names in static-web-server 0.4%