CVE-2026-8722

Katalog CVE

CVSS 6.5 · Medium EPSS 0,31%

Kerentanan Improper Neutralization of CRLF Sequences ('CRLF Injection') pada team net. Skor CVSS 3.1 6.5 (Medium) menurut CISA ADP.

Deskripsi (NVD)

Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.

Rincian

Terbit di NVD

4 Juni 2026

Terakhir diubah

22 Juli 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')
CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 21,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.cve.org/CVERecord?id=CVE-2026-46719 advisory pihak ketiga
• https://www.cve.org/CVERecord?id=CVE-2026-46720 advisory pihak ketiga