CVE-2026-1502 HTTP client proxy tunnel headers not validated for CR/LF Information published. EPSS 0.01 CVE-2026-1502 US Microsoft Security · 15. 4. 10:04