CVE-2021-47752 AWebServer GhostBuilding 18 - Denial of Service (DoS)
Remote attackers can crash the AWebServer GhostBuilding 18 web server by sending high-volume concurrent HTTP requests to various endpoints.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-47752?
CVE-2021-47752 is a high-severity denial of service vulnerability in Sylkat-Tools AWebServer GhostBuilding, published on 15 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
AWebServer GhostBuilding 18 contains a denial of service vulnerability that allows remote attackers to overwhelm the server by sending multiple concurrent HTTP requests. Attackers can generate high-volume requests to multiple endpoints including /mysqladmin to potentially crash or render the service unresponsive.
Weakness: CWE-770
Which versions are affected by CVE-2021-47752?
It affects 1 product.
Products include Sylkat-Tools Awebserver.
How do I fix CVE-2021-47752?
No fix has been published for CVE-2021-47752 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-47752 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2021-47752 exists.
Sources
Also known as GHSA-hw2r-j4x3-h8j6.