CVE-2026-22781 | maximmasiutin TinyWeb up to 1.97 on Win32 CreateProcess os command injection (GHSA-m779-84h5-72q2)

January 12, 2026 Yanac

A vulnerability categorized as critical has been discovered in maximmasiutin TinyWeb up to 1.97 on Win32. This affects the function CreateProcess. Such manipulation leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-22781. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More