Medium severity5.3OSV Advisory· Published Jan 26, 2026· Updated Jun 17, 2026

CVE-2025-57783

Description

Improper header parsing may lead to request smuggling has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to access restricted resources managed by Hiawatha webserver.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Hiawatha/HiawathaOSV2 versions
9.3.1, v10.0, v10.1, …+ 1 more
- (no CPE)range: 9.3.1, v10.0, v10.1, …
- (no CPE)range: =11.7
Hiawatha Webserver/Hiawatha
cpe:2.3:a:hiawatha-webserver:hiawatha:11.7:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000