https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T07:35:57.977640+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-25876 cnvd-2020-25876 2026-10-13T07:35:57.982350+00:00 cnvd-2020-25876 https://cve.radiocsirt.org/vuln/euvd-2026-40228 EUVD-2026-40228 2026-10-13T07:35:57.982381+00:00 EUVD-2026-40228 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10966 fkie_cve-2020-10966 2026-10-13T07:35:57.982394+00:00

In the Password Reset Module in VESTA Control Panel through 0.9.8-25 and Hestia Control Panel before 1.1.1, Host header manipulation leads to account takeover because the victim receives a reset URL containing an attacker-controlled server name.

 https://cve.radiocsirt.org/vuln/ghsa-qwg2-rf9c-v87f GHSA-qwg2-rf9c-v87f 2026-10-13T07:35:57.982422+00:00

In the Password Reset Module in VESTA Control Panel through 0.9.8-25 and Hestia Control Panel before 1.1.1, Host header manipulation leads to account takeover because the victim receives a reset URL containing an attacker-controlled server name.

 https://cve.radiocsirt.org/vuln/gsd-2020-10966 gsd-2020-10966 2026-10-13T07:35:57.982437+00:00 gsd-2020-10966