VULNERABILITY INTELLIGENCE

CVE-2026-35507

CVSS score6.4 MEDIUM

EPSS probability0.10%

CISA KEVNot currently listed

Published2026-04-03

Last modified2026-07-24

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L

Description

Shynet before 0.14.0 allows Host header injection in the password reset flow.