Skip to content
Threat Feed

Tag

Http-Request-Smuggling

1 brief RSS
critical threat

CVE-2026-1502 HTTP Client Proxy Tunnel Headers CR/LF Injection Vulnerability

CVE-2026-1502 is a critical vulnerability in Microsoft HTTP client proxy tunnel header validation, potentially allowing for CR/LF injection attacks.

crlf-injection http-request-smuggling proxy-vulnerability cve
2r 1t 1c