CVE-2025-40710 | Hotspot Shield VPN Client 12.9.2 Header Host injection

A vulnerability classified as problematic was found in Hotspot Shield VPN Client 12.9.2. This vulnerability affects unknown code of the component Header Handler. The manipulation of the argument Host leads to injection.

This vulnerability was named CVE-2025-40710. The attack can be initiated remotely. There is no exploit available.