CVE-2026-120635 | CGI up to 4.x Multipart/Form-Data Parser control sequence

November 4, 2026 Yanac

A vulnerability categorized as critical has been discovered in CGI up to 4.x. Affected by this vulnerability is an unknown functionality of the component Multipart/Form-Data Parser. The manipulation results in improper neutralization of escape, meta, or control sequences.

This vulnerability is cataloged as CVE-2026-120635. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More