CVE Intelligence

Shynet vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Shynet products: 2 record(s), with severity, exploitation and fixes.

Shynet 2

Exploited only (KEV) →

CVE-2026-35508 Medium · 6.1 CWE-79 Apr 2, 2026
Cross-site Scripting (XSS) in Shynet
Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,
CVE-2026-35507 Medium · 6.5 CWE-348 Apr 2, 2026
Shynet before 0.14.0 allows Host header injection in the password reset flow.
Shynet before 0.14.0 allows Host header injection in the password reset flow.