CVE-2026-28753 | F5 NGINX Open Source/NGINX Plus ngx_mail_smtp_module crlf injection (K000160367)

March 24, 2026 Yanac

A vulnerability described as problematic has been identified in F5 NGINX Open Source and NGINX Plus. This vulnerability affects the function ngx_mail_smtp_module. Such manipulation leads to crlf injection.

This vulnerability is traded as CVE-2026-28753. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More