static-web-server vulnerabilities
4 published CVEs name static-web-server among the affected products.
- 4Published CVEs4 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-75601
Static Web Server: Authentication bypass on /metrics endpoint when --basic-auth is enabled
static-web-server · static-web-server
Medium4.3 - CVE-2026-27480
Static Web Server: Timing-Based Username Enumeration in Basic Authentication
static-web-server · static-web-server
Medium5.3 - CVE-2025-67487
Static Web Server is vulnerable to symbolic link Path Traversal
static-web-server · static-web-server
Medium5.5 - CVE-2024-32966
Stored Cross-site Scripting in directory listings via file names in static-web-server
static-web-server · static-web-server
Medium5.8