log injection

CVE-2026-42507 is a Go standard-library vulnerability published in early June 2026 in which net/textproto could include attacker-controlled input in error messages without escaping it, creating a path for misleading log entries or terminal-control injection in software that prints or records...

Hitachi Energy has confirmed a vulnerability in its Asset Suite platform that lets an authenticated user manipulate performance log content or inject crafted entries into logfiles—behavior that can be used to obscure malicious activity or carry out follow‑on attacks—affecting Asset Suite...