A vulnerability described as problematic has been identified in milesmcc Shynet up to 0.13.x. This affects an unknown function of the component Password Reset Handler. Executing a manipulation of the argument Host can lead to use of less trusted source.

This vulnerability is handled as CVE-2026-35507. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.