https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:36:09.392006+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-321429 EUVD-2026-321429 2026-10-06T19:36:09.428043+00:00 EUVD-2026-321429 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43935 fkie_cve-2026-43935 2026-10-06T19:36:09.428083+00:00

e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to generate password reset links pointing to attacker-controlled domains. This can lead to phishing attacks, account takeover, or other security risks. The severity is high, as the vulnerability affects a critical function related to user authentication. This vulnerability is fixed in 2.3.4.