Skip to main content

Suse CVE-2026-66746

| EUVDEUVD-2026-49889 MEDIUM
HTTP Response Splitting (CWE-113)
2026-07-28 disclosure@vulncheck.com GHSA-998j-f97v-vpgr
RCE Suse
5.3
CVSS 4.0 · Vendor: vulncheck
Share

Severity by source

Vendor (vulncheck) PRIMARY
5.3 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
SUSE
5.4 MEDIUM
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Primary rating from Vendor (vulncheck).

CVSS VectorVendor: vulncheck

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
P
Scope
X

Lifecycle Timeline

1
Analysis Generated
Jul 28, 2026 - 16:41 vuln.today

DescriptionCVE.org

Rouille 0.4.0 through 3.6.2 contains an HTTP response splitting vulnerability that allows remote attackers to inject arbitrary response headers by embedding carriage return (0x0D) or line feed (0x0A) bytes into attacker-controlled input. Attackers can exploit percent-decoded query parameters reflected into response headers or inject bare LF characters into Cookie header values that are interpolated directly into Set-Cookie response headers, enabling cache poisoning, session fixation, and security header override attacks such as bypassing CSP or CORS policies.

AnalysisAI

HTTP response splitting in Rouille 0.4.0 to 3.6.2 allows remote attackers to inject arbitrary response headers. By embedding carriage return or line feed bytes into percent-decoded query parameters or Cookie header values, attackers can perform cache poisoning, session fixation, and override security policies like CSP or CORS. No active exploitation is confirmed, but proof-of-concept code may exist.

Same weakness CWE-113 – HTTP Response Splitting

View all
CVE-2024-52875 HIGH POC
8.8
CVE-2016-5699 MEDIUM POC
6.1
CVE-2016-8024 HIGH POC
8.1
CVE-2026-75419 HIGH POC
8.8
CVE-2018-11347 HIGH POC
8.8
CVE-2018-3911 HIGH POC
8.6
CVE-2018-7830 HIGH POC
7.5
CVE-2022-41915 MEDIUM POC
6.5

Same technique RCE

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2017-7269 CRITICAL POC
9.8
CVE-2022-47966 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2023-3519 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Not-Affected
SUSE Linux Enterprise Module for Development Tools 15 SP7 Not-Affected
SUSE Linux Enterprise Server 15 SP7 Not-Affected
SUSE Linux Enterprise Server 16.0 Affected

Share

CVE-2026-66746 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy