https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:47:45.225355+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-43935 CVE-2026-43935 — e107: Host Header Injection in e107 password reset enables phishing 2026-10-07T18:47:45.241665+00:00

Affected: e107inc e107

e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to generate password reset links pointing to attacker-controlled domains. This can lead to phishing attacks, account takeover, or other security risks. The severity is high, as the vulnerability affects a critical function related to user authentication. This vulnerability is fixed in 2.3.4.