exploit-intel.com

Critical Host Header Injection Vulnerability in Poweradmin (CVE-2026-54588)

First seen 25 Jun 2026, 00:26 UTC • •78.0

Article Content

1 / 6

Browse articles

ThreatCluster •June 26, 2026 at 00:13 UTC

•CVE-2026-54588 is a critical vulnerability with a CVSS score of 9.6.
•Unauthenticated attackers can exploit the HTTP_HOST header for account takeover.
•Patches are available in Poweradmin versions 4.2.4 and 4.3.3.

A critical vulnerability identified as CVE-2026-54588 affects Poweradmin, a web-based DNS administration tool for PowerDNS server. The flaw allows unauthenticated attackers to exploit the HTTP_HOST request header to manipulate callback URLs in OIDC, SAML, and logout flows. This can lead to account takeover without requiring user credentials. Versions prior to 4.2.4 and 4.3.3 are vulnerable, and a patch is available in these versions. Currently, there is no evidence of public proof-of-concept exploits or active exploitation. The vulnerability has been assigned a CVSS base score of 9.6, indicating its critical nature. Red Hat has confirmed that this vulnerability does not affect any of its supported products. Security professionals are advised to upgrade to the patched versions and implement additional network-level controls.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 97d ago How this analysis works

Timeline

2026-06-23

CVE-2026-54588 published

Details of the critical vulnerability in Poweradmin were officially published, highlighting the risk of account takeover through HTTP_HOST header exploitation.

Feedly

2026-06-24

First article on CVE-2026-54588 published

Feedly reported on the vulnerability, emphasizing the lack of public proof-of-concept and the availability of patches.

Feedly

2026-06-25

Exploit Intelligence article published

Exploit Intelligence provided additional details on CVE-2026-54588, reiterating the critical nature of the vulnerability and the patch availability.

exploit-intel.com