CVE-2026-0864: Configuration Injection via Carriage Return (\r) in write() method

Overview

Severity

N/A

Exploit Status

Not Exploited

Patch Tuesday

2026-Jun

Released

2026-06-27

Last Updated

2026-08-12

EPSS Score

0.18% (percentile: 7.2%)

Affected Products (3)

Other

• 21379-17084
• 21694-17084
• 21492-17084

Revision History

• 2026-06-27: Information published.
• 2026-06-28: Information published.
• 2026-07-03: Information published.
• 2026-08-12: Information published.