CVE-2026-94216
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
A vulnerability was found in ST Engineering iDirect iDX and Evo iDX, affecting the /authorize file of the HTTP Request Handler component. Manipulation of the Success argument leads to HTTP response splitting, exploitable remotely, and the exploit has been publicly disclosed. This vulnerability only affects products no longer supported by the maintainer; current supported releases (X10, X11, Velocity 5.x+) have no validated evidence of impact.
Risk Assessment
A remote attacker can inject HTTP response headers, enabling cache poisoning and phishing. The risk applies only to environments running unsupported product versions.
Recommendation
Plan migration from unsupported iDX/Evo iDX products to supported releases (e.g., X10, X11, Velocity 5.x+). Until migration, restrict network access to the /authorize interface of these devices.
Other vulnerabilities in ST Engineering iDirect iDX and Evo iDX
Original NVD description (English source)
A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handler. Executing a manipulation of the argument Success can lead to http response splitting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The validated environment is an EOL X7 (or an un-modelled legacy Evolution 21.x), and current supported releases (X10, X11, Velocity 5.x+) have no validated evidence of impact. This vulnerability only affects products that are no longer supported by the maintainer.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS