CVE-2026-117477
HTTP Header Injection via Crafted URLs
KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection vulnerability that may allow arbitrary HTTP headers to be injected into the HTTP response when a user accesses a specially crafted URL.
CVSS 4.0 · 5.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products