CriticalCVSS 9.8
EPSS 2.7%
Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters.