Lucene search
+L

7 matches found

NVD
NVD
•added 2026/10/14 7:17 p.m.•23 views

CVE-2026-102471

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the vertx-mail-client does not sanitize CR \r or LF \n characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name or value...

6.9CVSS0.0031EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/14 6:50 p.m.•19 views

EUVD-2026-101577

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the vertx-mail-client does not sanitize CR \r or LF \n characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name or value...

6.9CVSS6AI score0.0031EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/10/14 6:50 p.m.•20 views

CVE-2026-102471 CRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messages

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the vertx-mail-client does not sanitize CR \r or LF \n characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name or value...

6.9CVSS6AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/10/14 6:50 p.m.•19 views

CVE-2026-102471 CRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messages

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the vertx-mail-client does not sanitize CR \r or LF \n characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name or value...

6.9CVSS6AI score0.0031EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/14 6:50 p.m.•46 views

CVE-2026-102471 CRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messages

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the vertx-mail-client does not sanitize CR \r or LF \n characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name or value...

6.9CVSS0.0031EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/14 6:50 p.m.•50 views

CVE-2026-102471

The io.vertx:vertx-mail-client component in Eclipse Vert.x versions [4.0.0, 4.5.34] , [5.0.0, 5.0.12] , [5.1.0, 5.1.9] , and [5.2.0, 5.2.0] is vulnerable to CRLF header injection . The root cause is the failure to sanitize CR () and LF () characters in user-supplied email header names, values, an...

6.9CVSS6AI score0.0031EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•11 views

CVE-2026-102471: Improper Neutralization of CRLF Sequences

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the vertx-mail-client does not sanitize CR \r or LF \n characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name or value...

6.9CVSS6AI score0.0031EPSS
SaveExploits0References4
Rows per page
Query Builder