CVE-2025-12642 | lighttpd up to 1.4.80 HTTP Request request smuggling

November 4, 2025 Yanac

A vulnerability classified as problematic has been found in lighttpd up to 1.4.80. This affects an unknown function of the component HTTP Request Handler. Performing manipulation results in http request smuggling.

This vulnerability is reported as CVE-2025-12642. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More