Is CVE-2026-3234 actively exploited?

No active exploitation of CVE-2026-3234 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-3234 be exploited remotely?

Partially. CVE-2026-3234 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-3234?

CVE-2026-3234 has a CVSS score of 4.3 (MEDIUM).

HOME VULNERABILITIESCVE-2026-3234

MEDIUM

CVE-2026-3234

CWE-93Published: March 12, 2026· Updated: Mar 12, 2026

4.3

CVSS v3.1

EPSS:0.05%probability of exploitation in 30 daysPercentile:16.5th

Official Description

A flaw was found in mod_proxy_cluster. This vulnerability, a Carriage Return Line Feed (CRLF) injection in the decodeenc() function, allows a remote attacker to bypass input validation. By injecting CRLF sequences into the cluster configuration, an attacker can corrupt the response body of INFO endpoint responses. Exploitation requires network access to the MCMP protocol port, but no authentication is needed.

NVD Source

Technical Analysis

CVE-2026-3234 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.