CVE-2026-118371Published
LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line
Exact source revision recorded 28 Oct 2026 03:51:21 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-118371 · Microsoft / collected KEV context
cve-program · CVE-2026-118371
- https://github.com/openbsd/src/commit/d3f7195f4849d8a699cea4a3a67677f4b3dc1591
- https://github.com/openbsd/src/blob/3903c41d301d66facec69f7bf776b182cbc5ed62/lib/libcrypto/ocsp/ocsp_ht.c#L184
- https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-4.4.0-relnotes.txt
- https://github.com/libressl/portable
- https://www.vulncheck.com/advisories/libressl-through-4.4.0-crlf-injection-via-ocsp-sendreq-new-request-line
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.