Smallsrv vulnerabilities
We track 2 vulnerabilities in Smallsrv products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 26, 2026.
2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score
Latest Smallsrv vulnerabilities
- 7.8 High severity
Small HTTP: Unquoted Search Path or Element
Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files (x86)\shttps_mg\http.exe service'. This misconfiguration allows a local attacker to place a malicious executable
- 8.1 High severity
Small HTTP: Improper Limitation of a Pathname to a Restricted Directory
Problem in the Small HTTP Server v3.06.36 service. An authenticated path traversal vulnerability in '/' allows remote users to bypass the intended restrictions of SecurityManager and display any file if they have the appropriate permissions outside the documen