CVE Catalog
CVE-2026-68005
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.41%
34th percentile - higher than 34% of all known CVEs
Summary
An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handle_request() function
Risk Assessment
The vulnerability allows remote denial of service, which could lead to unavailability of the web server. The attack can be performed without authentication.
Recommendation
It is recommended to upgrade mini_httpd to the latest available version or apply available patches. Also, consider restricting access to the server.
Original NVD description (English source)
An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handle_request() function