CVE-2026-12200

HIGH

Ritlabs TinyWeb Server Header libeay32.dll.html stack-based overflow

Title source: cna
STIX 2.1

Description

A security vulnerability has been detected in Ritlabs TinyWeb Server up to 1.94 on Win32. This impacts an unknown function in the library libeay32.dll.html of the component Header Handler. The manipulation of the argument Authorization leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (5)

Core 5
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-370842 | Ritlabs TinyWeb Server Header libeay32.dll.html stack-based overflow
https://vuldb.com/vuln/370842
Signature, Permissions Required signature permissions-required
VDB-370842 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/370842/cti
Third Party Advisory third-party-advisory
CVE-2026-12200 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-12200
Third Party Advisory third-party-advisory
Submit #829894 | RITLabs TinyWeb 1.94 Stack-based Buffer Overflow
https://vuldb.com/submit/829894

Scores

CVSS v3 7.3
EPSS 0.0032
EPSS Percentile 23.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-119 CWE-121
Status published
Products (50)
Ritlabs/TinyWeb Server 1.0
Ritlabs/TinyWeb Server 1.1
Ritlabs/TinyWeb Server 1.10
Ritlabs/TinyWeb Server 1.11
Ritlabs/TinyWeb Server 1.12
Ritlabs/TinyWeb Server 1.13
Ritlabs/TinyWeb Server 1.14
Ritlabs/TinyWeb Server 1.15
Ritlabs/TinyWeb Server 1.16
Ritlabs/TinyWeb Server 1.17
... and 40 more
Published Jun 15, 2026
Tracked Since Jun 15, 2026