CVE-2026-117477
Full vulnerability record from the local CVENow database.
Description
KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection vulnerability that may allow arbitrary HTTP headers to be injected into the HTTP response when a user accesses a specially crafted URL.
Severity
MEDIUM
CVSS score
5.1
(v4.0)
Vulnerability status
Received
Source identifier
Published
2026-11-10 00:17:05.140000
Last modified
2026-11-10 00:17:05.140000
View original CVE JSON
{
"id": "CVE-2026-117477",
"sourceIdentifier": "[email protected]",
"published": "2026-11-10T00:17:05.140",
"lastModified": "2026-11-10T00:17:05.140",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection vulnerability that may allow arbitrary HTTP headers to be injected into the HTTP response when a user accesses a specially crafted URL."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "GMO Prime Strategy Co., Ltd.",
"product": "KUSANAGI 7 Security Edition",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "10.7.2-1",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "GMO Prime Strategy Co., Ltd.",
"product": "KUSANAGI 7 Enterprise Edition",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "10.7.2-1",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "GMO Prime Strategy Co., Ltd.",
"product": "KUSANAGI 8 Security Edition",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "10.7.2-1",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "GMO Prime Strategy Co., Ltd.",
"product": "KUSANAGI 8 Enterprise Edition",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "10.7.2-1",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "GMO Prime Strategy Co., Ltd.",
"product": "KUSANAGI 9 Security Edition",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "10.7.2-1",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "GMO Prime Strategy Co., Ltd.",
"product": "KUSANAGI 9 Enterprise Edition",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "10.7.2-1",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "GMO Prime Strategy Co., Ltd.",
"product": "KUSANAGI 7 Free Edition",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "9.12.2-1",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "GMO Prime Strategy Co., Ltd.",
"product": "KUSANAGI 7 Business Edition",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "9.12.2-1",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "GMO Prime Strategy Co., Ltd.",
"product": "KUSANAGI 7 Premium Edition",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "9.12.2-1",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "GMO Prime Strategy Co., Ltd.",
"product": "KUSANAGI 8 Free Edition",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "9.12.2-1",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "GMO Prime Strategy Co., Ltd.",
"product": "KUSANAGI 8 Business Edition",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "9.12.2-1",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "GMO Prime Strategy Co., Ltd.",
"product": "KUSANAGI 8 Premium Edition",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "9.12.2-1",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "GMO Prime Strategy Co., Ltd.",
"product": "KUSANAGI 9 Free Edition",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "9.12.2-1",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "GMO Prime Strategy Co., Ltd.",
"product": "KUSANAGI 9 Business Edition",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "9.12.2-1",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "GMO Prime Strategy Co., Ltd.",
"product": "KUSANAGI 9 Premium Edition",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "9.12.2-1",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "LOW",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-113"
}
]
}
],
"references": [
{
"url": "https://jvn.jp/en/vu/JVNVU92635551/",
"source": "[email protected]"
},
{
"url": "https://kusanagi.tokyo/en/releases/27995/",
"source": "[email protected]"
}
]
}