PT-2026-66858 · Hugo Leisink · Hiawatha

CVE-2026-51785

Published

2026-07-31

Updated

2026-08-03

CVSS v3.1

9.8

Critical

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hugo Leisink Hiawatha versions prior to 12.2

Description A flaw allows a remote attacker to execute arbitrary code by sending a specially crafted request to the server.

Recommendations Update Hugo Leisink Hiawatha to version 12.2 or later.

Exploit

Fix

RCE

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-51785

Hiawatha