CVE-2026-115877 | Twisted up to 26.9.x HTTP Channel twisted.web.http twisted.web.http.HTTPChannel.headerReceived crlf injection

October 23, 2026 Yanac

A vulnerability has been found in Twisted up to 26.9.x and classified as critical. This issue affects the function twisted.web.http.HTTPChannel.headerReceived of the file twisted.web.http of the component HTTP Channel. The manipulation leads to crlf injection.

This vulnerability is listed as CVE-2026-115877. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More