uhttpd vulnerabilities
CVEs whose affected-version data names the uhttpd package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-55613Medium· 6.9PoCuhttpd: HTTP request smuggling via ubus POST body parse-error desync
uhttpd is a small HTTP server. In unpatched repository snapshots, `uh_ubus_data_send()` in `ubus.c` can desynchronize HTTP request boundaries when a `POST /ubus` JSON body arrives in multiple TCP segments. An initial segment completing a…
CVE-2026-55612Low· 3.7uhttpd vulnerable to HTTP request smuggling via invalid chunk-length state reset
uhttpd is a small HTTP server. In unpatched repository snapshots, `client_poll_post_data()` in `client.c` consumes an invalid chunk-length line, such as a size exceeding INT_MAX, then clears `r->content_length` and `r->transfer_chunked` …
CVE-2026-55614Medium· 6.9uhttpd vulnerable to HTTP request smuggling via case-sensitive Transfer-Encoding matching
uhttpd is a small HTTP server. In unpatched repository snapshots, `client_parse_header()` in `client.c` lowercases header names but compares the `Transfer-Encoding` value to `chunked` using case-sensitive `strcmp`. A mixed-case transfer-…