← Back

CVE-2026-35507

nvd nist
Published: Apr 3, 2026Modified: Jul 24, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Shynet before 0.14.0 allows Host header injection in the password reset flow.

Affected (1)

Products: Shynet: Shynet
Shynet
1 product
Shynet
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Shynet
Up to 0.13.1

Related CWEs

CWE-348
Use of Less Trusted Source
The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.

References (2)

Source: cve@mitre.org
Issue TrackingVendor Advisory
Source: cve@mitre.org
Release Notes

Timeline

No history available yet.