Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-26234

JUNG Smart Visu Server - Improper Neutralization of HTTP Headers for Scripting Syntax

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

JUNG Smart Visu Server 1.1.1050 contains a request header manipulation vulnerability that allows unauthenticated attackers to override request URLs by injecting arbitrary values in the X-Forwarded-Host header. Attackers can manipulate proxied requests to generate tainted responses, enabling cache poisoning, potential phishing, and redirecting users to malicious domains.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ALBRECHT JUNG GMBH & CO. KG JUNG Smart Visu Server

  • 1.1.1050affected
  • 1.0.905affected
  • 1.0.832affected
  • 1.0.830affected

References