Hiawatha.leisink vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Hiawatha.leisink products: 1 record(s), with severity, exploitation and fixes.

Hiawatha Webserver 1

Exploited only (KEV) →

CVE-2025-57785 Medium · 6.5 CWE-415 Jan 26, 2026

Double free in XSLT in 'show_index'

A Double Free in XSLT `show_index` has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to corrupt data which may lead to arbitrary code execution.