https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:58:28.936438+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-261309 EUVD-2026-261309 2026-10-07T15:58:28.988062+00:00 EUVD-2026-261309 https://cve.radiocsirt.org/vuln/fkie_cve-2025-63828 fkie_cve-2025-63828 2026-10-07T15:58:28.988101+00:00

Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to redirects to malicious domains and potential session hijacking via cookie injection.

 https://cve.radiocsirt.org/vuln/ghsa-ffpg-gm3h-4p5p GHSA-ffpg-gm3h-4p5p — Backdrop CMS Host Header Injection vulnerability 2026-10-07T15:58:28.988134+00:00

Affected: Packagist: backdrop/backdrop

Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to redirects to malicious domains and potential session hijacking via cookie injection.