← Back to browse · API

CVE-2019-16278

Severity
CRITICAL
CVSS
9.8
EPSS
0.99033
Risk score
59.66
CISA KEV
Yes
PoC
No
Published
2019-10-14
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2019-7077, GHSA-495X-R3CR-6RGX
Products
Nostromo:nhttpd, n/a:n/a n/a
Sources
cisa.gov CVE-2019-16278
euvd EUVD-2019-7077

Description

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request.

References