CVE-2026-73117

Vendor

Apache Software Foundation

Product

Apache Juneau

CVSS v4.0

10.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-113

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 38
   CVE NVD 2h ago

   Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability in Apache Juneau.

   Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability in Apache Juneau. The Apache Juneau REST server passed response header values and redirect targets to the servlet container…

   CVSS 10.0 Fix available CVE-2026-73117 Apache Software Foundation