CVE-2025-41368 — Multiple vulnerabilities in Small HTTP server by Smallsrv
Problem in the Small HTTP Server v3.06.36 service. An authenticated path traversal vulnerability in '/' allows remote users to bypass the intended restrictions of SecurityManage…
Published: 2026-03-26 · CVSS: 8.7 · CVSS 4.0
Problem in the Small HTTP Server v3.06.36 service. An authenticated path traversal vulnerability in '/' allows remote users to bypass the intended restrictions of SecurityManager and display any file if they have the appropriate permissions outside the document root configured on the server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7