VULNERABILITY INTELLIGENCE

CVE-2025-55763

CVSS score7.5 HIGH
EPSS probability1.20%
CISA KEVNot currently listed
Published2025-08-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a crafted HTTP request. This vulnerability is triggered during request processing and may allow an attacker to corrupt heap memory, potentially leading to denial of service or arbitrary code execution.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-121

Primary references