Skip to content
Espilon
Projects
Platforms
Platforms
See all
→
Open source and resources
Live
Espilon Learn
Courses, challenges and labs on real devices: hardware, IoT, OT and ESP32.
Hardware
IoT
OT
Start learning
→
New
Pre-registration open
Espilon Hunt
Closed-door hardware bug hunt on real products. Pilot in May 2027.
Hardware
Bug hunt
Patch
Discover Hunt
→
Ended
Espilon CTF
28 hardware, IoT and OT challenges, with write-ups published.
Hardware
IoT
OT
See the CTF
→
Framework
Open-source ESP32 platform: firmware, C2 and modules
Documentation
Build guides, wiring and the full module API
Blog
Vulnerability write-ups, CTF solutions and research notes
Framework
Advisories
Partnerships
Supporters
About
Discord
GitHub
FR
Platforms
Espilon Learn
Espilon Hunt
New
Espilon CTF
Explore
Projects
Framework
Open-source ESP32 platform: firmware, C2 and modules
Advisories
Published CVEs, one advisory each
Documentation
Build guides, wiring and the full module API
Blog
Vulnerability write-ups, CTF solutions and research notes
Association
About
Partnerships
Supporters
Discord
GitHub
Advisories
/ CVE-2026-45541
CVE-2026-45541
CVSS 7.5, high
Remote NULL pointer dereference in the WebSocket server
Vendor
Espressif
Product
esp_http_server
Published
15 May 2026
Report
PDF, 6 pages, 1444 KB
Download the PDF
Vendor advisory
CVE record
Espilon-CVE-2026-45541.pdf
Page
1
/
6
−
+
Fit
Download
The viewer needs JavaScript.
Download the PDF