CVE-2026-12357highCWE-93

CVE-2026-12357: falha de alta gravidade em Heimdall Data Database Proxy

Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability

Publicada em

Seguir esta CVE+ Monitorar Database Proxy

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.2epss 1.1%
Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Authentication is required to exploit this vulnerability. The specific flaw exists within the generateFileContent function. The issue results from the lack of proper neutralization of CRLF sequences. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-29251.
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Heimdall Data · Database Proxy
CVEs relacionadas — Heimdall Data Database Proxy

No mesmo produto, das mais perigosas para as menos.

CVE-2026-18274HIGHHeimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution VulnerabilityEPSS 2.0%CVE-2025-12486HIGHHeimdall Data Database Proxy Cross-Site Scripting Remote Code Execution VulnerabilityEPSS 0.5%