Overview
What is CVE-2026-1502?
CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.
Vulnerability intelligence
CVE-2026-1502 and is rated Medium severity with a CVSS score of 5.7. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.