CVE-2025-55271
Low · 3.1CVSS
3.1
EPSS
0.3%
Published
Mar 26, 2026
CISA due date
—
The record
HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability where in depending on how the web application handles the split response, an attacker may be able to execute arbitrary commands or inject harmful content into the response..
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-2811 The Ajaxify Comments WordPress plugin before 3.2 is vulnerable to HTTP Header Injection… CWE-113
- CVE-2026-77341 cpp-httplib is a C++ header-only HTTP/HTTPS library. CWE-113
- CVE-2026-75419 go-wind-cms (GoWind) before 1.0.0 has a missing authorization vulnerability. CWE-113
- CVE-2026-50576 ePA 3.x Integration implements the authorization workflow and writes Medical Information… CWE-113
- CVE-2026-54163 secure_headers manages application of security headers with many safe defaults. CWE-113
- CVE-2026-50188 Kirby is an open-source content management system. CWE-113
- CVE-2026-55766 guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. CWE-113
- CVE-2026-50269 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. CWE-113