CVE Catalog
CVE-2026-51785
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.36%
29th percentile - higher than 29% of all known CVEs
Summary
Hugo Leisink Hiawatha version 12.1 and earlier contains a vulnerability that allows a remote attacker to execute arbitrary code via a crafted request.
Risk Assessment
An attacker can fully compromise the server, execute malicious code, and access sensitive data.
Recommendation
Update Hiawatha to the latest version containing the fix.
Original NVD description (English source)
An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a crafted request