CVE-2026-12200
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
A vulnerability has been detected in Ritlabs TinyWeb Server up to version 1.94 on Win32, affecting an unknown function in the library libeay32.dll.html of the Header Handler component. Manipulation of the Authorization argument leads to stack-based buffer overflow.
Risk Assessment
The attack can be initiated remotely, posing a serious security threat to the system. The public disclosure of the exploit increases the risk of its use.
Recommendation
It is recommended to update the TinyWeb Server to the latest version to mitigate the risk associated with this vulnerability. Additionally, systems should be monitored for potential attack attempts.
Original NVD description (English source)
A security vulnerability has been detected in Ritlabs TinyWeb Server up to 1.94 on Win32. This impacts an unknown function in the library libeay32.dll.html of the component Header Handler. The manipulation of the argument Authorization leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.