CVE-2026-35504

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

PowerSYSTEM Center email notification service is affected by a CRLF injection vulnerability when using SMTPS communication.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-93

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
May 12, 2026
Last modified
Jun 17, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-355057.5An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory CVE-2026-355068.6ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter. If processinCVE-2026-355076.5Shynet before 0.14.0 allows Host header injection in the password reset flow.CVE-2026-355086.1Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,CVE-2026-35514.4The Custom New User Notification plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's admin settings in all veCVE-2026-355128.8xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overflow in the EGFX (graphics dynamic virtual channel) CVE-2026-355146.5Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.CVE-2026-355156.1Nest is a framework for building scalable Node.js server-side applications. Prior to 11.1.18, SseStream._transform() interpolates message.tyCVE-2026-355165.0LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository::update and CheckLinksCommand::checkLink do not chCVE-2026-355178.8FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hoCVE-2026-355188.8FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-hoCVE-2026-355198.8FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface. From 6.0 to before 6.6, the Pi-ho
CVE-2026-35504: Medium severity, CVSS 5.5 | Vulnix