Mini_httpd-CVE-2018-18778

minihttpd Arbitrary File Read Vulnerability CVE-2018-18778 Minihttpd is a miniature HTTP server that can maintain a certain level of performance about 90% of Apache while occupying minimal system resources. Therefore, it is widely used as an embedded server in various IoT devices routers, switche...

ACME mini_httpd <1.30 - Local File Inclusion

ACME minihttpd before 1.30 is vulnerable to local file inclusion. id: CVE-2018-18778 info: name: ACME minihttpd 1.30 - Local File Inclusion author: DhiyaneshDK,dogasantos severity: medium description: ACME minihttpd before 1.30 is vulnerable to local file inclusion. impact: | Successful...

CVE-2018-18778

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:11+00:00| seen| Telegram/795CHWfqDB8d387Ptvi9l1rsbPfOiWfhqBLWLBanVVXFSs 2026-09-03 00:00:55+00:00| published-proof-of-concept| Telegram/795CHWfqDB8d387Ptvi9l1rsbPfOiWfhqBLWLBanVVXFSs...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

Ubuntu 16.04 ESM / 18.04 ESM : mini_httpd vulnerability (USN-4848-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-4848-1 advisory. It was discovered that ACME minihttpd did not properly handle HTTP GET requests with empty headers. A remote attacker could use this vulnerability to...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

UBUNTU-CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME mini_httpd before 1.30 is vulnerable to local file inclusion (LFI) via HTTP handling, enabling a remote attacker to read arbitrary files on the server. The issue is described as improper handling of HTTP GET requests with empty headers, facilitating file read access. Affected software: ACME ...