CRLF Injection - Vulnerability

Related Threat Clusters

• Critical CRLF Injection Vulnerability in cpp-httplib (CVE-2026-45372)

  A critical vulnerability, CVE-2026-45372, has been identified in cpp-httplib, a C++11 HTTP/HTTPS library. The flaw allows attackers to inject carriage return and newline byte pairs into HTTP header values due to…

  2 articles · Updated May 30, 2026
• Critical Privilege Escalation Vulnerability in Pardus Linux Discovered

  A critical privilege escalation vulnerability chain, tracked as CVE-2026-5140, has been identified in the Pardus Linux update mechanism. This flaw allows local users to gain full root access without authentication,…

  3 articles · Updated May 20, 2026
• High-Severity Laravel CRLF Injection Vulnerability Discovered

  A critical CRLF injection vulnerability in the Laravel framework, tracked as CVE-2026-48019, could allow attackers to manipulate outbound email processing in affected applications. This flaw affects Laravel versions up…

  2 articles · Updated June 3, 2026
• Multiple OpenJDK Versions Exposed to Remote Information Theft Vulnerabilities

  Vulnerabilities have been identified in OpenJDK versions 8, 11, and 21, as well as CRaC JDK 21. The RMI component in these versions allows unauthenticated remote attackers to establish TCP endpoint connections without…

  16 articles · Updated February 2, 2026
• SUSE and openSUSE Address CRLF Injection Vulnerability in netty

  SUSE and openSUSE released updates for netty to address a moderate security issue identified as CVE-2025-67735. The vulnerability involves a lack of URI sanitization in `HttpRequestEncoder`, which can lead to CRLF…

  2 articles · Updated December 19, 2025

Recent Intelligence Reports

• Laravel CRLF Injection Vulnerability Enables an Attacker to Interfere with Outbound Email Processing — Cybersecuritynews · June 3, 2026
• CVE-2026-45372: cpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injection [CRITICAL] CVSS 9.9 Exploit Intelligence — Recent CVEs / 16h cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.44.0, when cpp-httplib's server parses an incoming request, it applies percent-decoding to every header value except Location and Referer. The validity check (is_field_value) is run before decoding, so encod — exploit-intel.com · May 30, 2026
• Pardus Linux Vulnerability Chain Enables Complete System Takeover — Thecyberexpress · May 21, 2026
• Ubuntu 25.10 OpenJDK 17 Critical Risk RCE DoS USN-7998 — Linuxsecurity · February 3, 2026
• Ubuntu 25.10 OpenJDK 17 Important RMI Info Disclosure 7997-1 CVE-2026 — Linuxsecurity · February 3, 2026
• Ubuntu 25.10 OpenJDK 25 Critical RCE Information Disclosure 7996 — Linuxsecurity · February 3, 2026
• Ubuntu 25 OpenJDK 25 Important Security Threats USN-7995 — Linuxsecurity · February 3, 2026
• Ubuntu 25.10 OpenJDK 21 Critical Code Exec Issue USN-8002 — Linuxsecurity · February 3, 2026

Related Entities