0day - HTTP Smuggling - Hiawatha - CVE-2026-51785
HTTP Request Smuggling in Hiawatha - CVE-2026-51785
As part of our ongoing research into request smuggling, we identified an HTTP Request Smuggling vulnerability (CWE-444) in Hiawatha ≤ 12.1. Hiawatha is an open-source, security-focused web server for Unix-like systems, used to serve websites and host web applications.
CVSS 9.8