A vulnerability classified as critical was found in maximmasiutin TinyWeb up to 2.2. This vulnerability affects unknown code of the component HTTP Request Handler. Such manipulation leads to integer overflow.

This vulnerability is documented as CVE-2026-28497. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.