A vulnerability described as problematic has been identified in milesmcc Shynet up to 0.13.x. This affects an unknown function of the component Password Reset Handler. Executing a manipulation of the argument Host can lead to use of less trusted source.
This vulnerability is handled as CVE-2026-35507. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is recommended.