CVE-2026-86343
An improper neutralization of CRLF sequences vulnerability in the SNMP API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.
CVSS
6.8
Medium
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 12, 2026 · Last modified: Nov 12, 2026 · CWE-93
Not enough EPSS history yet.
An improper neutralization of CRLF sequences vulnerability in the SNMP API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users with administrator privileges to read or write arbitrary files and conduct denial-of-service attacks.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-127036——
——0Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in ibi WebFOCUS.
This issue affects WebFOCUS: 9.1, from 9.2 through 7, and from 9.3 through 7.4hCVE-2026-1268136.8 MED—
——0Roundcube Webmail before 1.6.21 and 1.7.x before 1.7.6 contains an IMAP command injection vulnerability that allows attackers to inject commands via CRLF in the _uid parameter when messages_cache is enabled. Attackers can lure logged-in victims into opening crafted GET links to mail/show or mail/get, executing IMAP commands that delete messages, change flags, or grant mailbox access via SETACL.5hCVE-2026-1267817.5 HIG—
——0Webmin through 2.670 contains a users file injection vulnerability in acl/cert_issue.cgi that allows authenticated Webmin users to inject lines by supplying unvalidated certificate DN fields containing newlines. Attackers can end a DN field with a backslash and newline to add a second root entry with a known password hash, gaining Webmin root access after miniserv restarts.1dCVE-2026-92441—31.8%
——10Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix header on regex Routes, allowing HTTP header injection and request smuggling to the upstream.7hCVE-2026-12135310.0 CRI65.8%
——20Adobe Connect is affected by an Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.9hCVE-2026-109683—24.5%
——7A newline
injection vulnerability exists in the UPnP service of Archer BE805 v1 such that
an adjacent attacker can supply newline characters in a UPnP port-mapping
description due to improper sanitization, resulting in possible injection of unintended
content into UPnP port-mapping data.
Successful
exploitation may allow an unauthenticated attacker on the local network to
modify runtime UPnP port-mapping information and create spoofed entries within
the affected service. The issue is limited to the integrity of UPnP mapping
data and does not demonstrate code execution or privilege escalation.7h