CVE-2026-86055 - Part-DB: Password Reset Link Poisoning via Host Header Injection leads to pre-authentication Account Takeover
CVE ID :CVE-2026-86055 Published : Oct. 23, 2026, 5:17 a.m. | 57 minutes ago Description :Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.3, Part-DB builds the absolute URL of the password-reset link it emails to a user from the...