CVE-2024-23770: UNIX4LYFE Darkhttpd

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.

Affected products

• UNIX4LYFE Darkhttpd: up to and including 1.15

Published 2024-01-22. Last modified 2026-06-17.