Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to generate password reset links pointing to attacker-controlled domains. This can lead to phishing attacks, account takeover, or other security risks. The severity is high, as the vulnerability affects a critical function related to user authentication. This vulnerability is fixed in 2.3.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
🚨 HIGH SEVERITY ALERT CVSS 8.1 | CVE-2026-43935 e107 CMS <2.3.4: Host Header Injection in password reset enables phishing & account takeover via attacker-controlled domains. ✅ Update to 2.3.4 immediately #CVE #PatchNow #ThreatIntel https://t.co/Nz7VveI6Q8
Post summary
An alert highlights a high‑severity host header injection in e107 CMS versions below 2.3.4, advising users to immediately upgrade to 2.3.4 to mitigate the risk.