Vulnerability · Published Aug 24, 2026 · Assigned by VulnCheck

CVE-2026-39915TIM Flow < 26.0.6 CRLF Injection via rt Parameter

High 8.1

In plain English

A high-severity security flaw in TIM Flow from TIM Solutions. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).

Severity (CVSS 3.1)8.1High

Exploit odds (30 days)0.5%top 58.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

TIM Flow before 26.0.6 contains a CRLF injection vulnerability that allows remote attackers to inject arbitrary HTTP headers and response body content by embedding unsanitized carriage return and line feed sequences in the rt URL parameter, which is reflected into Set-Cookie response headers. Attackers can craft malicious requests to induce authenticated users to execute arbitrary JavaScript in their browser context, enabling session token theft and account credential modification.

Affected products (as reported)

Vendor	Product	Versions
TIM Solutions	TIM Flow	0 – before 26.0.6

Weakness: CWE-113 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

References

Release Notes release-notes
https://www.vulncheck.com/advisories/tim-flow-crlf-injection-via-rt-parameter third-party-advisory