Known Vulnerabilities for Uc-httpd by Xiongmaitech
Listed below are 2 of the newest known vulnerabilities associated with "Uc-httpd" by "Xiongmaitech".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-93302 json | MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that ... | Not Provided | 2026-09-27 | 2026-09-29 |
| CVE-2026-91002 json | A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function _blacklist of the fi... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-88837 json | BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication ch... | Not Provided | 2026-09-23 | 2026-09-25 |
| CVE-2026-88831 json | BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule ma... | Not Provided | 2026-09-23 | 2026-09-25 |
| CVE-2026-87721 json | Uncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 search query parser (QueryParser / Query.g) in Gerrit Co... | Not Provided | 2026-09-24 | 2026-09-25 |
| CVE-2026-85384 json | A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in t... | Not Provided | 2026-09-08 | 2026-09-10 |
| CVE-2026-79768 json | Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with�... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-75118 json | A pre-authentication stack-based buffer overflow vulnerability exists in the http_gdpr_decrypt function of TL-MR100 V3.20 due... | Not Provided | 2026-08-28 | 2026-09-01 |
| CVE-2026-74994 json | The mod_auth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple dir... | Not Provided | 2026-09-01 | 2026-09-08 |
| CVE-2026-74835 json | The inets application HTTP server httpd fails to enforce a configured body-size limit on chunked request. This issue affects... | Not Provided | 2026-09-01 | 2026-09-08 |