CVE-2021-41732

An issue was discovered in zeek version 4.1.0. There is a HTTP request splitting vulnerability that will invalidate any ZEEK HTTP based security analysis. NOTE: the vendor's position is that the observed behavior is intended

• CWE-444
• CWE-444

• https://github.com/zeek/zeek/issues/1798Exploit, Issue Tracking, Third Party Advisory
• https://github.com/zeek/zeek/issues/1798Exploit, Issue Tracking, Third Party Advisory

Published

Sep 29, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4172Cross-site Scripting (XSS) - Stored in GitHub repository sta…5.4
• CVE-2021-41720Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-41728Cross Site Scripting (XSS) vulnerability exists in Sourcecod…6.1
• CVE-2021-41729BaiCloud-cms v2.5.7 is affected by an arbitrary file deletio…9.1
• CVE-2021-4173vim is vulnerable to Use After Free7.8
• CVE-2021-41731Cross Site Scripting (XSS vulnerability exists in )Sourcecod…4.8
• CVE-2021-41733Oppia 3.1.4 does not verify that certain URLs are valid befo…6.1
• CVE-2021-41736Faust v2.35.0 was discovered to contain a heap-buffer overfl…9.8
• CVE-2021-41737In Faust 2.23.1, an input file with the lines "// r visualis…7.5
• CVE-2021-41738ZeroShell 3.9.5 has a command injection vulnerability in /cg…8.8
• CVE-2021-41739A OS Command Injection vulnerability was discovered in Artic…9.8
• CVE-2021-41744All versions of yongyou PLM are affected by a command inject…9.8