milesmcc vulnerabilities

Products

• Shynet 2

Latest milesmcc CVEs

Newest publication first

1. CVE-2026-35508 Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,

   Published 2026-04-03

   Medium·CVSS 6.1 EPSS 0.16%

   Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,

2. CVE-2026-35507 Shynet before 0.14.0 allows Host header injection in the password reset flow.

   Published 2026-04-03

   Medium·CVSS 6.5 EPSS 0.11%

   Shynet before 0.14.0 allows Host header injection in the password reset flow.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.