CVE-2026-26234 - Vulnerability Analysis

Overview

JUNG Smart Visu Server 1.1.1050 contains an open redirect caused by manipulation of the X-Forwarded-Host header, letting unauthenticated attackers redirect users to malicious domains, exploit requires crafted request with manipulated header.

Severity & Score

Impact

Unauthenticated attackers can redirect users to malicious domains, enabling phishing and cache poisoning attacks.

Mitigation

Update to the latest version that fixes the header manipulation vulnerability.

References

• https://www.vulncheck.com/advisories/jung-smart-visu-server-improper-neutralization-of-http-headers-for-scripting-syntax
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5970.php

Social Media Activity(1 post)

Offensive Sequence

@offseq

Feb 12, 2026

🔎 CVE-2026-26234 (HIGH): JUNG Smart Visu Server (v1.0.830 – 1.1.1050) allows unauthenticated X-Forwarded-Host header injection — leads to cache poisoning, phishing, and redirects. Patch when available, restrict access, monitor logs. https://radar.offseq.com/threat/cve-2026-26234-improper-neutralization-of-http-hea-13dc0f5b #OffSeq #Vuln #IoT

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner