PatchTheCVEtinyweb vulnerabilities and fixes
Recent CVEs affecting tinyweb, with upgrade or downgrade steps. 8 tracked.
tinyweb has 8 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-03-06. Highest priority: CVE-2026-22781 (score 63/100).
- CVE-2026-29046 HIGH 8.2 UPGRADE TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32
- CVE-2026-28497 CRITICAL 9.1 UPGRADE TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32
- CVE-2026-27633 HIGH 7.5 UPGRADE TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32
- CVE-2026-27630 HIGH 7.5 UPGRADE TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32
- CVE-2026-27613 CRITICAL 9.8 UPGRADE TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32
- CVE-2026-22781 CRITICAL 9.8 UPGRADE TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32
- CVE-2024-5193 MEDIUM 5.3 DOWNGRADE A security vulnerability has been detected in Ritlabs TinyWeb Server 1.94
- CVE-2024-34199 HIGH 8.6 UPGRADE TinyWeb 1.94 and below allows unauthenticated remote attackers to cause a denial of service (Buffer Overflow)
FAQ
How do I fix tinyweb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tinyweb being exploited right now?
None of the tracked tinyweb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tinyweb CVE should I patch first?
CVE-2026-22781 currently ranks highest (63/100): TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.