CVE-2026-26234

Name of the Vulnerable Software and Affected Versions JUNG Smart Visu Server version 1.1.1050

Description JUNG Smart Visu Server version 1.1.1050 contains a request header manipulation issue that allows unauthenticated attackers to override request URLs by injecting arbitrary values into the X-Forwarded-Host header. Attackers can manipulate proxied requests to generate tainted responses, potentially leading to cache poisoning, phishing, and redirection of users to malicious domains. The vulnerability involves improper neutralization of HTTP headers for scripting syntax.

Recommendations Restrict access to the X-Forwarded-Host header to prevent manipulation.