https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 16:07:58 +0000 https://cve.radiocsirt.org/vuln/cve-2026-39971 <p><strong>Affected:</strong> s9y Serendipity</p> <p>Serendipity is a PHP-powered weblog engine. In versions 2.6-beta2 and below, the email sending functionality in include/functions.inc.php inserts $_SERVER[&#39;HTTP_HOST&#39;] directly into the Message-ID SMTP header without validation, and the existing sanitization function serendipity_isResponseClean() is not called on HTTP_HOST before embedding it. An attacker who can control the Host header during an email-triggering action such as comment notifications or subscription emails can inject arbitrary SMTP headers into outgoing emails. This enables identity spoofing, reply hijacking via manipulated Message-ID threading, and email reputation abuse through the attacker&#39;s domain being embedded in legitimate mail headers. This issue has been fixed in version 2.6.0.</p> <p><strong>Affected:</strong> s9y Serendipity</p> <p>Serendipity is a PHP-powered weblog engine. In versions 2.6-beta2 and below, the email sending functionality in include/functions.inc.php inserts $_SERVER[&#39;HTTP_HOST&#39;] directly into the Message-ID SMTP header without validation, and the existing sanitization function serendipity_isResponseClean() is not called on HTTP_HOST before embedding it. An attacker who can control the Host header during an email-triggering action such as comment notifications or subscription emails can inject arbitrary SMTP headers into outgoing emails. This enables identity spoofing, reply hijacking via manipulated Message-ID threading, and email reputation abuse through the attacker&#39;s domain being embedded in legitimate mail headers. This issue has been fixed in version 2.6.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-39971