CVE-2026-2400

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application user credentials to reset when a Web Admin user alters the POST /setPCBEDesc request payload.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-93

Affected software

No affected versions have been published.

Timeline

Published
Apr 14, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-240005.3Fleet is open source device management software. Prior to version 4.80.1, Fleet trusted client-supplied IP address headers when determining CVE-2026-240017.5jsdiff is a JavaScript text differencing implementation. Prior to versions 8.0.3, 5.2.2, 4.0.4, and 3.5.1, attempting to parse a patch whoseCVE-2026-240029.6Grist is spreadsheet software using Python as its formula language. Grist offers several methods for running those formulas in a sandbox, foCVE-2026-240035.3EVerest is an EV charging software stack. In versions up to and including 2025.12.1, it is possible to bypass the sequence state verificatioCVE-2026-240045.3Fleet is open source device management software. In versions prior to 4.80.1, a vulnerability in Fleet’s Android MDM Pub/Sub handling could CVE-2026-240057.6Kruise provides automated management of large-scale applications on Kubernetes. Prior to versions 1.8.3 and 1.7.5, PodProbeMarker allows defCVE-2026-240067.5Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, CVE-2026-240074.6Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap is missing CSRF protection in the Overview iCVE-2026-240099.8Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling.CVE-2026-24015.0CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to be exposed when CVE-2026-240108.0Horilla is a free and open source Human Resource Management System (HRMS). A critical File Upload vulnerability in versions prior to 1.5.0, CVE-2026-240127.5Uncontrolled Resource Consumption vulnerability in Apache IoTDB.  Some interface fails to impose reasonable limits on the time span and agg