Skip to content
Threat Feed
Subscribe

Product

SimpleHTTPServer

1 brief RSS
critical advisory

goshs SimpleHTTPServer SFTP Authentication Bypass Vulnerability (CVE-2026-40884)

goshs SimpleHTTPServer prior to version 2.0.0-beta.6 contains an SFTP authentication bypass vulnerability that allows unauthenticated network attackers to access files when the server is started with specific configuration parameters.

SimpleHTTPServer authentication-bypass sftp vulnerability network
2r 1t 1c