Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-117477 EUVD-2026-120519GHSA-ffvm-q5m2-m27v

KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection vulnerability that may allow arbitrary HTTP headers to …

Published Nov 9, 2026 · Updated Nov 12, 2026 · Assigned by jpcert

Description

KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection vulnerability that may allow arbitrary HTTP headers to be injected into the HTTP response when a user accesses a specially crafted URL.

Affected products

VendorProductAffectedFixed
GMO Prime Strategy KUSANAGI 7 — —
GMO Prime Strategy KUSANAGI 9 Security Edition ≤ 10.7.2-1 —
GMO Prime Strategy KUSANAGI 9 Enterprise Edition ≤ 10.7.2-1 —
GMO Prime Strategy KUSANAGI 8 Free Edition — —
GMO Prime Strategy KUSANAGI 8 Business Edition — —
GMO Prime Strategy KUSANAGI 8 Premium Edition — —
GMO Prime Strategy KUSANAGI 9 Free Edition ≤ 9.12.2-1 —
GMO Prime Strategy KUSANAGI 9 Business Edition ≤ 9.12.2-1 —
GMO Prime Strategy KUSANAGI 9 Premium Edition ≤ 9.12.2-1 —

References