CVE-2025-13826CWE-20

CVE-2025-13826

published April 21, 2026

CVSS
8.2
EPSS
0%
Percentile
15.8
In the wild
Unconfirmed
What it is

Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made. The vulnerability is caused by inadequate validation of user-supplied input. An attacker can exploit this vulnerability by sending malicious requests. If the vulnerability is successfully exploited, the application can be made to stop responding, resulting in a DoS condition. It is possible to manually restart the application.

The record
Technical detail
CVSS
8.2 · NONE
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-04-21T13:16Z
References (1)
https://www.incibe.es/en/incibe-cert/notices/aviso/incorrect-input-validation-zervit-portable-httpweb-server · [email protected]
EPSS history
Timeline
  • 21 APR 08:19Z
    Incorrect input validation on the Zervit portable HTTP/Web server
    cvelistv5