Skip to content
OpenAdvisories

Product · Part-DB

Part-DB-server

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-86055

    Part-DB: Password Reset Link Poisoning via Host Header Injection leads to pre-authentication Account Takeover

    Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.3, Part-DB builds the absolute URL of the password-reset link it emails to a user from the client-supplied HTTP Host header, with no trusted-host validation…

    Part-DB Part-DB-server