cvedb.io
CVE-2026-10836
UNKNOWN · CVSS n/a
EPSS exploitation probability: 0%
Published 2026-06-17T13:19:32.507 · Last modified 2026-06-17T16:18:00.113

Summary

Improper handling of HTTP headers that allows a remote attacker to manipulate the value of the Host header using specially crafted requests. A successful exploit could result in the generation of manipulated links or responses, potentially leading to limited information disclosure or compromising the integrity of dependent services.

Does this affect you?

Add your gear to cvedb and we'll alert you only when a vendor you run ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.