cPanel · CRLF Injection

A CRLF (Carriage Return Line Feed) injection vulnerability has been identified in cPanel & WHM. This type of vulnerability can allow an attacker to manipulate HTTP headers or inject arbitrary headers by inserting CRLF sequences. No specific affected versions or detailed technical information are provided. There is no information about available patches or vendor advisories. The severity is assessed as medium based on the potential impact of CRLF injection vulnerabilities.

• exploit-db.com/exploits/52574 (opens in a new tab)
• exploit-db.com/raw/52574 (opens in a new tab)
• nvd.nist.gov/vuln/detail/CVE-2026-41940 (opens in a new tab)

• NanaZip 6.5 · DoSMediumVulnerability2026-08-18
• PCMan 2.0.7 · Buffer OverflowMediumVulnerability2026-08-18
• Langflow 1.8.4 · Path Traversal to Remote Code ExecutionCriticalVulnerability2026-08-31
• Linksys E1200_2.0.04 · Unauthenticated OS Command InjectionCriticalVulnerability2026-08-31
• EasyAppointments 1.5.1 · Blind SQL InjectionHighVulnerability2026-09-01