PT-2026-22059

CVE-2026-27812

Published

2026-02-26

Updated

2026-03-05

Description by

CVSS 3.1

9.1

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Sub2API versions prior to 0.1.85

Description Sub2API is an AI API gateway platform for managing API quotas. A Password Reset Poisoning issue exists due to trust in the Host and Forwarded headers, allowing manipulation of the password reset link. Attackers can inject a domain into the password reset link, potentially leading to account takeover via the affected endpoint.

Recommendations Upgrade to version 0.1.85 or later. Disable the "forgot password" feature until an upgrade to a patched version can be performed.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-116: Improper Encoding or Escaping of Output

Related identifiers

CVE-2026-27812