Monicahq CVEs & Vulnerabilities

1 CVEs affecting Monicahq products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

monica 1

CVE-2026-26747CRITICALpoc

A Host Header Poisoning vulnerability exists in Monica 4.1.2 due to improper handling of the HTTP Host header in app/Providers/AppServiceProvider.php, combined with the default misconfiguration where the "app.force_url" is not set and default is "false". The application generates absolute URLs (such as those used in password reset emails) using the user-supplied Host header. This allows remote attackers to poison the password reset link sent to a victim,

20 Feb 2026

9.1

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database