CVE-2026-117477: Medium severity GMO Prime Strategy KUSANAGI vulnerability
Published Nov 9, 2026
·Updated
KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection vulnerability that may allow arbitrary HTTP headers to be injected into the HTTP response when a user accesses a specially crafted URL.
Affected Software
1 affected component
GMO Prime Strategy KUSANAGI
Event History
Nov 9, 2026
CVE Published
via MITRE·11:22 PM
Data Sourced
via MITRE·11:22 PM
DescriptionSeverity
Nov 10, 2026
Data Sourced
via NVD·12:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
An attacker needs to persuade a user to access a specially crafted URL. No authentication or privileges are required, and the vulnerable service must be reachable over the network.
2
What is the likely impact of successful exploitation?
Successful exploitation may let an attacker inject arbitrary HTTP headers into the HTTP response. The provided severity vector indicates potential low-impact confidentiality and integrity effects, with no availability impact stated.