CWE-93 · Injection and Smuggling
Improper Neutralization of CRLF Sequences
265CVEs
0exploited
5with a public check
5likely (EPSS 10%+)
SortMost likely exploited
265 CVEs with CWE-93 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-0666CheckMicroweber < 1.2.11 - CRLF Injectionmicroweber · microweber/microweber · CVSS 7.6 · 2022-02-18 | 7.6 | 44% | 2022-02-18 |
| CVE-2016-4975CheckApache mod_userdir CRLF injectionApache Software Foundation · Apache HTTP Server · 2018-08-14 | – | 20% | 2018-08-14 |
| CVE-2017-5868CheckOpenVPN Access Server 2.1.4 - CRLF InjectionOpenvpn · Openvpn Access Server · 2017-05-25 | – | 4.6% | 2017-05-25 |
| CVE-2026-23829CheckMailpit < 1.28.2 - SMTP CRLF Injectionaxllent · mailpit · CVSS 5.3 · 2026-01-18 | 5.3 | 1.4% | 2026-01-18 |
| CVE-2026-22777CheckComfyUI-Manager < 3.39.2 - CRLF Configuration InjectionComfy-Org · ComfyUI-Manager · CVSS 7.5 · 2026-01-10 | 7.5 | 0.9% | 2026-01-10 |
| CVE-2016-3115Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11…Openbsd · Openssh · CVSS 6.4 · 2016-03-22 | 6.4 | 36% | 2016-03-22 |
| CVE-2024-20337A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacker to conduct a carriage return line feed (CRLF) injection a…Cisco · Cisco Secure Client · CVSS 8.2 · 2024-03-06 | 8.2 | 30% | 2024-03-06 |
| CVE-2021-39172New line injection during configuration editionfiveai · Cachet · CVSS 8.8 · 2021-08-27 | 8.8 | 29% | 2021-08-27 |
| CVE-2019-10678Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options.Domoticz · Domoticz · 2019-03-31 | – | 17% | 2019-03-31 |
| CVE-2018-19585GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection in Project Mirroring when using the Git protocol.Gitlab · Gitlab · 2019-05-17 | – | 15% | 2019-05-17 |
| CVE-2019-9740An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as dem…Python · Python · CVSS 6.5 · 2019-03-13 | 6.5 | 5.4% | 2019-03-13 |
| CVE-2019-9947An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as dem…Python · Python · CVSS 5.4 · 2019-03-23 | 5.4 | 5.3% | 2019-03-23 |
| CVE-2015-9096Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before a…Ruby-Lang · Ruby · 2017-06-12 | – | 3.7% | 2017-06-12 |
| CVE-2023-4768Improper Neutralization of CRLF Sequences in ManageEngine Desktop CentralManageEngine · Desktop Central · CVSS 6.1 · 2023-11-03 | 6.1 | 3.5% | 2023-11-03 |
| CVE-2023-4767Improper Neutralization of CRLF Sequences in ManageEngine Desktop CentralManageEngine · Desktop Central · CVSS 6.1 · 2023-11-03 | 6.1 | 3.5% | 2023-11-03 |
| CVE-2015-9097The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated b…Mail Project · Mail · 2017-06-12 | – | 3.4% | 2017-06-12 |
| CVE-2017-6508CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subc…Gnu · Wget · 2017-03-07 | – | 2.9% | 2017-03-07 |
| CVE-2022-31014SMTP Command Injection in iCalendar Attachments to emails via newlines in Nextcloud Servernextcloud · security-advisories · CVSS 5.4 · 2022-07-05 | 5.4 | 2.5% | 2022-07-05 |
| CVE-2018-12537In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value…The Eclipse Foundation · Eclipse Vert.x · 2018-08-14 | – | 2.5% | 2018-08-14 |
| CVE-2020-11078CRLF injection in httplib2httplib2 · httplib2 · CVSS 6.8 · 2020-05-20 | 6.8 | 2.4% | 2020-05-20 |
| CVE-2014-2017CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Edition before 5.0.11 and 5.1.x before 5.1.4, and Community Editio…Oxidforge · Eshop · 2018-01-18 | – | 2.4% | 2018-01-18 |
| CVE-2018-1000164gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "process_headers" function in "gunicorn/http/wsgi.py" that c…Gunicorn · Gunicorn · 2018-04-18 | – | 2.4% | 2018-04-18 |
| CVE-2021-31164Apache Unomi log injectionApache Software Foundation · Apache Unomi · 2021-05-04 | – | 2.3% | 2021-05-04 |
| CVE-2026-39983FTP Command Injection via CRLF in basic-ftppatrickjuchli · basic-ftp · CVSS 8.6 · 2026-04-09 | 8.6 | 2.2% | 2026-04-09 |
| CVE-2019-9741An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the second argument to http.NewRequest wi…Golang · Go · 2019-03-13 | – | 2.2% | 2019-03-13 |
| CVE-2019-11236In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.Python · Urllib3 · 2019-04-15 | – | 2.1% | 2019-04-15 |
| CVE-2016-5331CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attac…Vmware · Vcenter Server · 2016-08-08 | – | 2.1% | 2016-08-08 |
| CVE-2026-72590alseambusher crontab-ui - Unauthenticated RCE via Newline Injection in env_vars Parameteralseambusher · crontab-ui · CVSS 9.8 · 2026-08-10 | 9.8 | 2.0% | 2026-08-10 |
| CVE-2026-129103Cudy TR3000 before 2.5.42 Command Injection via Scheduled Reboot TimeShenzhen Cudy Technology Co., Ltd. · TR3000 1.0 · CVSS 7.2 · 2026-11-13 | 7.2 | 2.0% | 2026-11-13 |
| CVE-2026-82854Nodemailer before 8.0.4 SMTP Command Injection via envelope.sizenodemailer · nodemailer · CVSS 9.8 · 2026-08-31 | 9.8 | 2.0% | 2026-08-31 |
| CVE-2025-57804h2 allows HTTP Request Smuggling due to illegal characters in headerspython-hyper · h2 · CVSS 6.9 · 2025-08-25 | 6.9 | 1.9% | 2025-08-25 |
| CVE-2026-111228Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.phpNetgate · pfSense CE · CVSS 5.5 · 2026-10-15 | 5.5 | 1.8% | 2026-10-15 |
| CVE-2026-111227Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.phpNetgate · pfSense CE · CVSS 5.5 · 2026-10-15 | 5.5 | 1.8% | 2026-10-15 |
| CVE-2016-6484CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attack…Infoblox · Netmri · 2017-01-23 | – | 1.8% | 2017-01-23 |
| CVE-2016-9964redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.Bottlepy · Bottle · 2016-12-16 | – | 1.8% | 2016-12-16 |
| CVE-2015-0770CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers a…Cisco · Telepresence Tc Software · 2015-06-07 | – | 1.7% | 2015-06-07 |
| CVE-2026-129102Cudy TR3000 before 2.5.42 Command Injection via vpn.set_conf IPsec keyexchangeShenzhen Cudy Technology Co., Ltd. · TR3000 1.0 · CVSS 7.2 · 2026-11-13 | 7.2 | 1.7% | 2026-11-13 |
| CVE-2025-59419Netty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgerynetty · netty · CVSS 5.5 · 2025-10-15 | 5.5 | 1.6% | 2025-10-15 |
| CVE-2007-0892CRLF injection vulnerability in phpMyVisites before 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in…Matthieu Aubry · Phpmyvisites · 2007-02-12 | – | 1.5% | 2007-02-12 |
| CVE-2022-31150CRLF injection in request headersnodejs · undici · CVSS 5.3 · 2022-07-19 | 5.3 | 1.5% | 2022-07-19 |
| CVE-2022-35948CRLF Injection in Nodejs ‘undici’ via Content-Typenodejs · undici · CVSS 5.3 · 2022-08-13 | 5.3 | 1.4% | 2022-08-13 |
| CVE-2026-15429Privilege Escalation via Improper Input Sanitization in TP-Link Archer VX1800vTP-Link Systems Inc. · Archer VX1800v v1 · CVSS 5.1 · 2026-07-14 | 5.1 | 1.4% | 2026-07-14 |
| CVE-2020-3561Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CRLF Injection VulnerabilityCisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 4.7 · 2020-10-21 | 4.7 | 1.3% | 2020-10-21 |
| CVE-2026-30227MimeKit: CRLF Injection in Quoted Local-Part Enables SMTP Command Injection and Email Forgeryjstedfast · MimeKit · CVSS 6.9 · 2026-03-06 | 6.9 | 1.2% | 2026-03-06 |
| CVE-2017-2111HTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware v…I-O DATA DEVICE, INC. · TS-WPTCAM · 2017-04-28 | – | 1.2% | 2017-04-28 |
| CVE-2025-25184Possible Log Injection in Rack::CommonLoggerrack · rack · CVSS 5.7 · 2025-02-12 | 5.7 | 1.2% | 2025-02-12 |
| CVE-2014-9563CRLF injection vulnerability in the web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allows remot…Unify · Openstage Sip · 2018-04-12 | – | 1.2% | 2018-04-12 |
| CVE-2018-12477obs-service-refresh_patches can be tricked into deleting '..' or other unrelated directoriesopenSUSE · Open Build Service · CVSS 3.5 · 2018-10-09 | 3.5 | 1.2% | 2018-10-09 |
| CVE-2023-26130Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Po…Cpp-Httplib Project · yhirose/cpp-httplib · CVSS 7.5 · 2023-05-30 | 7.5 | 1.1% | 2023-05-30 |
| CVE-2014-9564CRLF injection vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware before 3.4.1110 allows remote attackers to inject arbitrary HTTP he…Ibm · Ib6131 Firmware · 2017-08-25 | – | 1.1% | 2017-08-25 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.