CVE-2012-10058: Rabidhamster r4 Embedded Server

Critical severity, CVSS 10.0. EPSS: 2% chance of exploitation in the next 30 days.

RabidHamster R4 v1.25 contains a stack-based buffer overflow vulnerability due to unsafe use of sprintf() when logging malformed HTTP requests. A remote attacker can exploit this flaw by sending a specially crafted URI, resulting in arbitrary code execution under the context of the web server process.

Affected products

• Rabidhamster r4 Embedded Server: version 1.25 only

Published 2025-08-13. Last modified 2026-06-16.