Skip to content
OpenAdvisories

Vendor

Hotspot Shield

2 known vulnerabilities.

Products

Hotspot Shield 1 Hotspot Shield VPN client 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.3
    CVE-2025-40710

    Host Header Injection (HHI) in the Hotspot Shield VPN client

    Host Header Injection (HHI) vulnerability in the Hotspot Shield VPN client, which can induce unexpected behaviour when accessing third-party web applications through the VPN tunnel. Although such applications do not present this vulnerability per se, the use …

    Hotspot Shield Hotspot Shield VPN client