CVE-2026-10836: Password Manager

Medium severity, CVSS 5.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper handling of HTTP headers that allows a remote attacker to manipulate the value of the Host header using specially crafted requests. A successful exploit could result in the generation of manipulated links or responses, potentially leading to limited information disclosure or compromising the integrity of dependent services.

Affected products

• Password Manager Password Manager

Published 2026-06-17. Last modified 2026-06-17.