Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-26234 1 Albrecht Jung 1 Jung Smart Visu Server 2026-02-12 8.8 High
JUNG Smart Visu Server 1.1.1050 contains a request header manipulation vulnerability that allows unauthenticated attackers to override request URLs by injecting arbitrary values in the X-Forwarded-Host header. Attackers can manipulate proxied requests to generate tainted responses, enabling cache poisoning, potential phishing, and redirecting users to malicious domains.
CVE-2026-26235 1 Albrecht Jung 1 Jung Smart Visu Server 2026-02-12 7.5 High
JUNG Smart Visu Server 1.1.1050 contains a denial of service vulnerability that allows unauthenticated attackers to remotely shutdown or reboot the server. Attackers can send a single POST request to trigger the server reboot without requiring any authentication.