CVE-2026-35507

MEDIUM NVD

CVSS Score 6.4

Severity MEDIUM

Published Apr 03, 2026

Vendor unknown

Description

Shynet before 0.14.0 allows Host header injection in the password reset flow.