Smallsrv Small Http Server — known CVE vulnerabilities

Every CVE whose affected-product data names Smallsrv Small Http Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-28994 — CVSS 9.8 (critical): Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request.
• CVE-2025-41368 — CVSS 8.1 (high): Problem in the Small HTTP Server v3.06.36 service. An authenticated path traversal vulnerability in '/' allows remote users to bypass the…
• CVE-2025-41359 — CVSS 7.8 (high): Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at…