CVE-2026-10836 — Improper neutralization of HTTP headers in Password Manager
Improper handling of HTTP headers that allows a remote attacker to manipulate the value of the Host header using specially crafted requests. A successful exploit could result in…
Published: 2026-06-17 · CVSS: 5.1 · CVSS 4.0
Improper handling of HTTP headers that allows a remote attacker to manipulate the value of the Host header using specially crafted requests. A successful exploit could result in the generation of manipulated links or responses, potentially leading to limited information disclosure or compromising the integrity of dependent services.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7