VULNERABILITY INTELLIGENCE

CVE-2026-0865

EPSS probability0.55%

CISA KEVNot currently listed

Published2026-01-20

Last modified2026-06-17

Description

User-controlled header names and values containing newlines can allow injecting HTTP headers.