CVE-2026-32964 MEDIUM

CVE-2026-32964

Vendor Silex Technology, Inc.
Product SD-330AC
Weakness CWE-93 · CRLF injection
Published April 20, 2026
Last update April 20, 2026
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

What the vulnerability does

01Description

SD-330AC and AMC Manager provided by silex technology, Inc. contain an improper neutralization of CRLF sequences ('CRLF Injection') vulnerability. Processing some crafted configuration data may lead to arbitrary entries injected to the system configuration.

Key dates

02Disclosure timeline

April 20, 2026 CVE published
April 20, 2026 Record updated