Dashboard / CVE-2026-127036

CVE-2026-127036

HIGH
MEDIUM Priority: 0.03 BB Relevance: 62/100
Published: 2026-11-12 Modified: 2026-11-12 First seen: 2026-11-12 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: None
S: X
AT: None
VC: High
VI: High
VA: Low

Description

Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in ibi WebFOCUS. This issue affects WebFOCUS: 9.1, from 9.2 through 7, and from 9.3 through 7.

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
ibi WebFOCUS 9.1
ibi WebFOCUS 9.2
ibi WebFOCUS 9.3
ibi WebFOCUS 9.1
ibi WebFOCUS 9.2
ibi WebFOCUS 9.3

References & Advisories (1)

Bug Bounty Relevance

62 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

8.6 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.33%
Raw Score 0.003260
Percentile 26.1%
Date 2026-11-13

Intelligence Sources

mitre ref →
nvd ref →

External Links