CVE-2026-32964 describes a CRLF injection vulnerability in silex technology, Inc.'s SD-330AC and AMC Manager products. The vulnerability arises from improper neutralization of carriage return and line feed sequences in configuration data processing. Exploiting this flaw could allow an attacker to inject arbitrary entries into the system configuration, potentially impacting system integrity and availability. The affected versions are 1.42 and earlier. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with no confidentiality impact but limited integrity and availability impact.

Successful exploitation may result in arbitrary entries being injected into the system configuration, which could lead to system misconfiguration or disruption of normal operations. The CVSS score reflects no confidentiality impact but partial integrity and availability impacts. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is provided, users should monitor vendor communications for updates. Until a patch is available, avoid processing untrusted configuration data and restrict access to configuration interfaces where possible.