Vulnerabilities

TI-2026-83405 CVE-2026-62966

NULL pointer write in ESPAsyncWebServer multipart parser

LOW 39

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00426 Published 2026-10-30 Fixed in 3.11.2 CWE-476

TI-2026-39406 CVE-2026-54571

MEDIUM 44

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00524 Published 2026-09-17 Fixed in 3.11.1 CWE-190

TI-2025-33087 CVE-2025-53094

HIGH 77

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0043 Published 2025-06-27 No fix listed CWE-113