CVE-2026-32964

CVE-2026-32964 is a CRLF injection vulnerability affecting Silex Technology's SD-330AC and AMC Manager products that allows attackers to inject arbitrary entries into system configuration files by processing specially crafted configuration data. This improper neutralization of carriage return/line feed sequences could enable unauthorized modification of system settings and behavior. The vulnerability carries a CVSS 3.1 score of 6.5 (Medium severity) with a network-based attack vector requiring no authentication or user interaction, making it relatively accessible. However, the impact is limited to integrity and availability concerns with no confidentiality impact, and the attack complexity is low. The FAUCET Risk Score of 35 out of 100 indicates moderate organizational risk. There is currently no evidence of active exploitation, with the vulnerability absent from the Known Exploited Vulnerabilities catalog and showing minimal community attention reflected in the very low EPSS score of 0.0004. No public exploit code is available, and the vulnerability remains on an inactive hot list, suggesting it has not yet become a widespread threat in the wild.