Hiawatha vulnerabilities

Products

• Web Server 3

Newest

• hiawatha-webserver hiawatha, hiawatha web server +1 more Tomahawk authentication timing attack due to usage of 'strcmp' CVE-2025-57784 3.3 LowJanuary 26, 2026
• hiawatha.leisink hiawatha webserver, hiawatha web server +1 more Double free in XSLT in 'show_index' CVE-2025-57785 6.5 MediumJanuary 26, 2026
• hiawatha-webserver hiawatha, hiawatha web server +1 more Improper header parsing may lead to request smuggling CVE-2025-57783 5.3 MediumJanuary 26, 2026