CVE-2026-1299Patch

LOWCVSS 6.0 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. This is only applicable if using "LiteralHeader" writing headers that don't respect email folding rules, the new behavior will reject the incorrectly folded headers in "BytesGenerator".

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-93

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
3 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 3 signals
Technical details provided in 3 signals
Peaked 1d ago at 2 mentions (2026-02-28); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Patch

3100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-28	2	Patch2
2026-07-17	1	Patch1

Full discourse3 posts

VulniPulse@vulnipulse87d
Patch
⚠️ NetApp Active IQ Unified Manager for Microsoft Windows alert: CVE-2026-1299 (CVSS 6.0) Attackers could affect the listed product. No workaround is available; follow the vendor advisory for updates. https://vulnipulse.com/advisories/netapp-ntap-20260717-0014 #NetApp #CyberSecurity #CVE
Post summary
The advisory announces CVE‑2026‑1299 (CVSS 6.0) for NetApp Active IQ Unified Manager, notes no workaround, and directs users to the vendor advisory for patch updates.
0000039
6 followersView on X
Ferramentas Linux@Cezar_H_Linux225d
Patch
Critical patch for #Fedora 42's python3.9 is live. Fixes CVE-2026-1299 (email header injection) and CVE-2025-15366 (IMAP command injection). Read more: 👉 https://tinyurl.com/2yxa8r39 #Security https://t.co/uIPWcG9AAg
Post summary
A critical patch for Fedora 42’s python3.9 addresses CVE‑2026‑1299 and CVE‑2025‑15366, with details available via the provided link.
00000222
1.3K followersView on X
ThreatCluster@threatcluster226d
Patch
Fedora 42 and 43 ship security updates for python3.9, fixing critical command injection flaws (CVE-2026-1299, CVE-2026-0865, CVE-2025-15366, CVE-2025-15367). Developers should update. #Linux https://threatcluster.io/cluster/fedora-python-39-command-injection-vulnerabilities-addressed-ae49cdaf
Post summary
Fedora 42 and 43 have released security updates that fix critical command injection vulnerabilities in python3.9; developers are advised to apply the patches.
00000146
83 followersView on X

Explore more

Back to dashboard