PatchSiren

Nostromo CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Known exploited Nostromo CVE published 2024-11-07

CVE-2019-16278

CVE-2019-16278 is a Nostromo nhttpd directory traversal vulnerability that CISA has added to its Known Exploited Vulnerabilities catalog. The KEV listing means defenders should treat this as a high-priority issue and act by the CISA due date, 2024-11-28, using vendor mitigations if available or discontinuing use of the product if they are not.