CVE-2023-26788

Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the request to be sent to a completely different Domain/IP address.

• CWE-79
• CWE-79

• https://github.com/IthacaLabs/Veritas-TechnologiesVendor Advisory
• https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20Appliance%20v4.1.0.1/HHI/HHI_CVE-2023-26788.txtExploit, Vendor Advisory
• https://github.com/IthacaLabs/Veritas-TechnologiesVendor Advisory
• https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20Appliance%20v4.1.0.1/HHI/HHI_CVE-2023-26788.txtExploit, Vendor Advisory

Published

Apr 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2678A vulnerability has been found in SourceCodester File Tracke…5.4
• CVE-2023-26780CleverStupidDog yf-exam v 1.8.0 is vulnerable to SQL Injecti…9.8
• CVE-2023-26781SQL injection vulnerability in mccms 2.6 allows remote attac…9.8
• CVE-2023-26782An issue discovered in mccms 2.6.1 allows remote attackers t…6.5
• CVE-2023-26784SQL Injection vulnerability found in Kirin Fortress Machine …9.8
• CVE-2023-26785MariaDB v10.5 was discovered to contain a remote code execut…9.8
• CVE-2023-26789Veritas NetBackUp OpsCenter Version 9.1.0.1 is vulnerable to…6.1
• CVE-2023-2679Data leakage in Adobe connector in Snow Software SPE 9.27.0 …4.3
• CVE-2023-26793libmodbus v3.1.10 has a heap-based buffer overflow vulnerabi…9.8
• CVE-2023-2680This CVE exists because of an incomplete fix for CVE-2021-37…8.2
• CVE-2023-26800Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 …9.8
• CVE-2023-26801LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-L…9.8