CWE-93 对CRLF序列的转义处理不恰当(CRLF注入) 类弱点 83 条 CVE 漏洞汇总，含 AI 中文分析。
| CVE ID | 标题 | CVSS | 风险等级 | 发布日期 |
|---|---|---|---|---|
| CVE-2026-42037 | Axios 未过滤blob.type致CRLF注入漏洞 — axios | 5.3 | Medium | 2026-04-24 |
| CVE-2026-41230 | Froxlor 注入漏洞 — froxlor | 8.5 | High | 2026-04-23 |
| CVE-2026-2717 | WordPress plugin HTTP Headers 注入漏洞 — HTTP Headers | 5.5 | Medium | 2026-04-22 |
| CVE-2026-32964 | Silex SD-330AC和Silex AMC Manager 安全漏洞 — SD-330AC | 6.5 | Medium | 2026-04-20 |
| CVE-2026-6351 | Openfind MailGates和Openfind MailAudit 安全漏洞 — MailGates | 7.5 | High | 2026-04-16 |
| CVE-2026-2400 | Schneider Electric PowerChute Serial Shutdown 注入漏洞 — PowerChute™ Serial Shutdown | 4.5 | - | 2026-04-14 |
| CVE-2026-35601 | Vikunja 注入漏洞 — vikunja | 4.1 | Medium | 2026-04-10 |
| CVE-2026-39983 | Basic FTP 安全漏洞 — basic-ftp | 8.6 | High | 2026-04-09 |
| CVE-2026-39958 | oma 注入漏洞 — oma | 5.3AI | MediumAI | 2026-04-09 |
| CVE-2026-39394 | CI4MS 安全漏洞 — ci4ms | 8.1 | High | 2026-04-08 |
| CVE-2026-34975 | plunk 注入漏洞 — plunk | 8.5 | High | 2026-04-06 |
| CVE-2026-26962 | Rack 注入漏洞 — rack | 4.8 | Medium | 2026-04-02 |
| CVE-2026-2442 | WordPress plugin Pagelayer 注入漏洞 — Page Builder: Pagelayer – Drag and Drop website builder | 5.3 | Medium | 2026-03-28 |
| CVE-2026-33635 | iCalendar 注入漏洞 — icalendar | 4.3 | Medium | 2026-03-26 |
| CVE-2026-20113 | Cisco IOS XE Software 注入漏洞 — Cisco IOS XE Software | 5.3 | Medium | 2026-03-25 |
| CVE-2026-28753 | F5 NGINX Plus和F5 NGINX Open Source 注入漏洞 — NGINX Open Source | 3.7 | Low | 2026-03-24 |
| CVE-2026-33128 | H3 注入漏洞 — h3 | 7.5 | High | 2026-03-20 |
| CVE-2026-3633 | libsoup 注入漏洞 — Red Hat Enterprise Linux 10 | 3.9 | Low | 2026-03-17 |
| CVE-2026-3634 | libsoup 安全漏洞 — Red Hat Enterprise Linux 10 | 3.9 | Low | 2026-03-17 |
| CVE-2026-1527 | undici 安全漏洞 — undici | 4.6 | Medium | 2026-03-12 |
| CVE-2026-3234 | mod_cluster 注入漏洞 — Red Hat Enterprise Linux 10 | 4.3 | Medium | 2026-03-12 |
| CVE-2026-3848 | GitLab 注入漏洞 — GitLab | 5.0 | Medium | 2026-03-11 |
| CVE-2026-30227 | MimeKit 注入漏洞 — MimeKit | 8.2 | - | 2026-03-06 |
| CVE-2026-28296 | gvfs 注入漏洞 — Red Hat Enterprise Linux 10 | 4.3 | Medium | 2026-02-26 |
| CVE-2026-1714 | WordPress plugin ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution 注入漏洞 — ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | 8.6 | High | 2026-02-18 |
| CVE-2026-1536 | libsoup 注入漏洞 — Red Hat Enterprise Linux 10 | 5.8 | Medium | 2026-01-28 |
| CVE-2026-1467 | libsoup 注入漏洞 — Red Hat Enterprise Linux 10 | 5.8 | Medium | 2026-01-27 |
| CVE-2026-24489 | gakido 注入漏洞 — gakido | 5.3 | Medium | 2026-01-27 |
| CVE-2026-1299 | CPython 安全漏洞 — CPython | 4.3 | - | 2026-01-23 |
| CVE-2026-23953 | Incus 注入漏洞 — incus | 8.7 | High | 2026-01-22 |
CWE-93（对CRLF序列的转义处理不恰当(CRLF注入)） 是常见的弱点类别，本平台收录该类弱点关联的 83 条 CVE 漏洞。