CVE-2025-13826 — Incorrect input validation on the Zervit portable HTTP/Web server

CVE-2025-13826

Incorrect input validation on the Zervit portable HTTP/Web server PUBLISHED

Description (CNA)

Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made. The vulnerability is caused by inadequate validation of user-supplied input. An attacker can exploit this vulnerability by sending malicious requests. If the vulnerability is successfully exploited, the application can be made to stop responding, resulting in a DoS condition. It is possible to manually restart the application.

Affected (CNA)

Vendor / product	Versions
Zervit / portable HTTP/Web server	affected 0

CWE

CWE-20

References

https://www.incibe.es/en/incibe-cert/notices/aviso/incorrect-input-validation-zervit-portable-httpweb-server

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.