Dashboard / CVE-2025-55763

CVE-2025-55763

HIGH 1 PoC
MEDIUM Priority: 0.09 BB Relevance: 85/100
Published: 2025-08-29 Modified: 2026-11-07 First seen: 2026-11-07 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: None
A: High

Description

Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a crafted HTTP request. This vulnerability is triggered during request processing and may allow an attacker to corrupt heap memory, potentially leading to denial of service or arbitrary code execution.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
civetweb_project civetweb 1.14 – 1.16

References & Advisories (2)

https://github.com/krispybyte/CVE-2025-55763
Exploit Third Party Advisory

Proof of Concept (1)

★ 5
https://github.com/krispybyte/CVE-2025-55763
nomi-sec

Bug Bounty Relevance

85 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction
✓ PoC available (1)

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

1.20%
Raw Score 0.011980
Percentile 68.6%
Date 2026-11-13

EPSS Trend

2026-11-13
0.01198
2026-11-12
0.01198
2026-11-10
0.01198
2026-11-09
0.01198
2026-11-08
0.01198
2026-11-07
0.01198

Intelligence Sources

nvd ref →

External Links