CWE-93

CWE-93 · 9 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-93, highest CVSS first.

  1. CRITICAL 9.9CVE-2026-100717public PoC2026-09-26

    froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl rejects carriage return and line feed characters only in the path, query and fragment components returned by parse_url, and never inspects the userinfo (user:pass@)…

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 8.8CVE-2026-55159public PoC2026-09-21

    luci-app-adblock-fast a WebUI for fast, lightweight DNS-based ad-blocker for OpenWrt that works with dnsmasq, smartdns, or unbound. Prior to 1.2.4-2, the luci.adblock-fast.setCronEntry RPC method accepts an entry argument containing carriage-return or line-fee…

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 7.8CVE-2026-918412026-09-25

    A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the ro…

    AI risk analysis on Exploit-DB.ai →

  4. HIGH 7.8CVE-2026-918402026-09-25

    A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary…

    AI risk analysis on Exploit-DB.ai →

  5. HIGH 7.8CVE-2026-918392026-09-25

    A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm-fortisslvpn-service improperly handles carriage-return/line-feed (CR/LF) characters in VPN connection profile credentials. A local unprivileged user can exploit t…

    AI risk analysis on Exploit-DB.ai →

  6. HIGH 7.5CVE-2026-935762026-09-18

    A flaw was found in Netty netty-codec-smtp. The component does not properly validate Carriage Return (CR) and Line Feed (LF) characters in the SMTP command-name field. A remote attacker, if an application routes untrusted input into this field, can embed CR/LF…

    AI risk analysis on Exploit-DB.ai →

  7. HIGH 7.2CVE-2026-61815public PoC2026-09-24

    zbateson/mail-mime-parser is a mail mime parser alternative to PHP's imap* functions and Pear libraries for reading messages in Internet Message Format RFC 822. Prior to version 3.0.6 and 4.0.2, CRLF (carriage-return / line-feed) header injection (CWE-93) affe…

    AI risk analysis on Exploit-DB.ai →

  8. MEDIUM 4CVE-2026-940572026-09-19

    Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.

    exim

    AI risk analysis on Exploit-DB.ai →

  9. UNSCOREDCVE-2026-909902026-09-22

    Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk <2.5.0p14 allows an authenticated user to inject additional Livestatus query headers, bypassing object visibility restrictions in count queries to infe…

    AI risk analysis on Exploit-DB.ai →