CVE-2022-40870

PoC ×2—

CVSS 3.1

8.1 high

EPSS

2%p79

Published

Nov 23, 2022 (Nov 23, 2022)

Modified

Jun 17, 2026

Description

The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a crafted payload injected into the Host header.

Vendors: parallels
Products: remote application server
Weakness: CWE-116
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.