CVE-2026-127036
ibi WebFOCUS - OS Command Injection Vulnerability
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in ibi WebFOCUS. This issue affects WebFOCUS: 9.1, from 9.2 through 7, and from 9.3 through 7.
| CWE | CWE-93 |
| Vendor | ibi |
| Product | webfocus |
| Published | Nov 12, 2026 |
| Last Updated | Nov 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for ibi webfocus
Be the first to know when new unknown vulnerabilities affecting ibi webfocus are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
ibi / WebFOCUS
9.1 9.2 ≤ 7 9.3 ≤ 7