CVE-2025-40710

Host Header Injection HHI vulnerability in the Hotspot Shield VPN client, which can induce unexpected behaviour when accessing third-party web applications through the VPN tunnel. Although such applications do not present this vulnerability per se, the use of the tunnel, together with a forged Ho...

CVE-2025-40710

creationtimestamp| type| source ---|---|--- 2025-06-30 11:07:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19922 2025-06-30 13:33:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lstcd2r2ah2i...

CVE-2025-40710 Host Header Injection (HHI) in the Hotspot Shield VPN client

Host Header Injection HHI vulnerability in the Hotspot Shield VPN client, which can induce unexpected behaviour when accessing third-party web applications through the VPN tunnel. Although such applications do not present this vulnerability per se, the use of the tunnel, together with a forged Ho...