Host-Header

MCPJam Inspector / Arcane MCP Connect Command Injection RCE via Host-Header Vhost Routing (CVE-2026-23520) newCVE-2026-23520webCRITICALPatched2026-07-05LiteLLM Proxy Unauthenticated Auth Bypass via Host-Header Route Confusion (CVE-2026-49468) newCVE-2026-49468webCRITICAL 9.8Patched2026-07-05