CVE-2026-1502

CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.

PSF·CWE-93·Published 2026-04-10

CVSS

—

EPSS

0.00

KEV

Exploits

cve.orgen

74 chars

CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.

NVDen

74 chars

CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.

Version	Type	Source	Base	Exp	Impact	Vector
4.0	Primary	cve.org	5.7	—	—	CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
4.0	Secondary	NVD	5.7	—	—