CVE-2023-26788

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p37

Published

Apr 10, 2023 (Apr 10, 2023)

Modified

Jun 17, 2026

Description

Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the request to be sent to a completely different Domain/IP address.

Vendors: veritas
Products: netbackup appliance firmware
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.