Critical Alert 1 Active Exploit Detected Today

CVE-2026-9082 Drupal Core SQL Injection Vulnerability →
Powered by CVE Watchtower
×

CVE Watchtower

Advanced Threat Data Export

Filter and download the raw CVE repository (CSV/JSON) for SIEM integration and internal reporting.

Data export is locked. Upgrade your package to enable filtering and downloading.

← Back to CVE List

CVE-2025-57784NVD

Description

Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows a local attacker to access the management client.
Severity Level
LOW (3.3)
Published Date
26/01/2026
Last Modified
18/02/2026
Exploitation Status
UNKNOWN