CVE-2026-26234

🗓️ 12 Feb 2026 02:31:11Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 9 Views🌐 WEB

Unauthenticated attackers override URLs via Forwarded Host Header on Jung Smart Visu Server, enabling cache poisoning.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-26234	12 Feb 202602:31	–	attackerkb
Circl	CVE-2026-26234	12 Feb 202606:59	–	circl
CNNVD	JUNG Smart Visu Server 安全漏洞	12 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-26234 JUNG Smart Visu Server - Improper Neutralization of HTTP Headers for Scripting Syntax	12 Feb 202602:31	–	cvelist
NVD	CVE-2026-26234	12 Feb 202604:15	–	nvd
Positive Technologies	PT-2026-7814	12 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-26234	13 Feb 202607:21	–	redhatcve
Vulnrichment	CVE-2026-26234 JUNG Smart Visu Server - Improper Neutralization of HTTP Headers for Scripting Syntax	12 Feb 202602:31	–	vulnrichment
Zero Science Lab	JUNG Smart Visu Server 1.1.1050 Request URL Override	12 Feb 202600:00	–	zeroscience

NVD

Vulners

CNA

Node

jung-group smart_visu_server_firmwareRange1.0.830–1.1.1050

AND

jung-group smart_visu_serverMatch-

[
  {
    "vendor": "ALBRECHT JUNG GMBH & CO. KG",
    "product": "JUNG Smart Visu Server",
    "versions": [
      {
        "version": "1.1.1050",
        "status": "affected"
      },
      {
        "version": "1.0.905",
        "status": "affected"
      },
      {
        "version": "1.0.832",
        "status": "affected"
      },
      {
        "version": "1.0.830",
        "status": "affected"
      }
    ]
  }
]

Source	Link
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5970.php
vulncheck	www.vulncheck.com/advisories/jung-smart-visu-server-improper-neutralization-of-http-headers-for-scripting-syntax

Parameter	Position	Path	Description	CWE
X-Forwarded-Host	header	rest/items?2sdh5r6txj=1	Unauthenticated cache poisoning via X-Forwarded-Host header override in proxied requests.	CWE-644

05 Mar 2026 01:31Current

5.7Medium risk

Vulners AI Score5.7

CVSS 48.7

CVSS 3.18.8

EPSS0.00045

SSVC

CWE-644