PatchTheCVEwebserver vulnerabilities and fixes
Recent CVEs affecting webserver, with upgrade or downgrade steps. 6 tracked.
webserver has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-12-18. Highest priority: CVE-2023-53941 (score 71/100).
- CVE-2025-3847 HIGH 7.3 MITIGATE A vulnerability classified as critical has been found in markparticle WebServer up to 1.0
- CVE-2025-3846 HIGH 7.3 MITIGATE A vulnerability was found in markparticle WebServer up to 1.0
- CVE-2025-3845 HIGH 7.3 MITIGATE A vulnerability was found in markparticle WebServer up to 1.0
- CVE-2024-11215 MEDIUM 6.5 DOWNGRADE Absolute path traversal (incorrect restriction of a path to a restricted directory) vulnerability in the EasyP
- CVE-2023-53944 MEDIUM 6.5 DOWNGRADE EasyPHP Webserver 14.1 contains a path traversal vulnerability that allows remote users with low privileges to
- CVE-2023-53941 CRITICAL 9.8 DOWNGRADE EasyPHP Webserver 14.1 contains an OS command injection vulnerability that allows unauthenticated attackers to
FAQ
How do I fix webserver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webserver being exploited right now?
None of the tracked webserver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webserver CVE should I patch first?
CVE-2023-53941 currently ranks highest (71/100): EasyPHP Webserver 14.1 contains an OS command injection vulnerability that allows unauthenticated attackers to.