CVE-2026-113403: CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') in ArmorX Global Technology ArmorX Spam

CVE-2026-113403 describes a Command Injection vulnerability in ArmorX Spam caused by improper neutralization of CRLF sequences (CWE-93). This flaw allows authenticated remote attackers to inject malicious commands into a parameter, enabling them to upload malicious code to the server. The vulnerability is rated high severity with a CVSS 4.0 score of 7.1. No vendor advisory or patch information is available to confirm remediation status or affected versions.

Successful exploitation allows authenticated remote attackers to execute arbitrary commands on the server, leading to malicious code upload. This can compromise server integrity and potentially lead to further unauthorized actions. The vulnerability requires authentication and has no user interaction needed, increasing risk within authorized user contexts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to authenticated users and monitor for suspicious activity related to command injection attempts in ArmorX Spam.