CRLF Injection Vulnerability in ibi WebFOCUS by TIBCO

CVE-2026-127036

What is CVE-2026-127036?

The vulnerability identified in ibi WebFOCUS pertains to improper handling of CRLF sequences, leading to potential injection exploits. This could allow attackers to manipulate HTTP headers, enabling various attacks such as cross-site scripting or redirection to malicious sites. Affected versions include WebFOCUS 9.1, as well as several releases from version 9.2 through 7, and 9.3 through 7. Organizations using these versions should review their configurations and apply necessary patches to ensure the security of their applications.

References