Remote Denial of Service in Zervit's Portable HTTP/Web Server

CVE-2025-13826

What is CVE-2025-13826?

The portable HTTP/web server developed by Zervit has a critical flaw that allows remote attackers to exploit it via improperly validated user input. When an attacker sends a specially crafted configuration reset request, they may trigger a denial of service condition, causing the server to become unresponsive. While the application may be restarted manually to restore functionality, this vulnerability poses a significant risk to availability, necessitating immediate attention and remediation.

References