{"vulnerability": "CVE-2026-54588", "sightings": [{"uuid": "cc1443dd-e929-4414-adee-47a1a7221cf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54588", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moylpvwyu22t", "content": "CVE-2026-54588 - Poweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction.\nCVE ID : CVE-2026-54588\n \n Published : June 23, 2026, 10:09 p.m. | 1\u00a0hour, 34\u00a0minutes ago\n \n Description : Poweradmin is a web-based DNS administrati...", "creation_timestamp": "2026-06-23T23:50:17.512291Z"}, {"uuid": "40c12c82-63fe-4822-b160-7d165cba80b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54588", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mp2fjn4xgw2o", "content": "CVE-2026-54588 - Critical OIDC/SAML redirect_uri poisoning in Poweradmin. Unauthenticated attacker can steal auth codes via HTTP_HOST header injection. CVSS 9.6. No patch available. Disable OIDC/SAML until fixed. #CVE #infosec #Poweradmin\n\nhttps://www.valtersit.com/cve/CVE-2026-54588/", "creation_timestamp": "2026-06-24T17:04:44.070193Z"}, {"uuid": "cf6c3379-3398-4daa-b7b8-c23a417f60e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54588", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpmwyotshg2c", "content": "A critical Poweradmin host header injection flaw (CVE-2026-54588) lets attackers hijack DNS admin accounts. Update to 4.2.4 or 4.3.3 now.\n\n#Poweradmin #PowerDNS #CVE202654588 #AccountTakeover #CyberSecurity #DNS", "creation_timestamp": "2026-07-02T02:05:18.350154Z"}, {"uuid": "bc135a0c-0548-4286-b55c-e0ea335ed65e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54588", "type": "seen", "source": "https://gist.github.com/alon710/10debd6350fb30cffecd8ed90a44aae9", "content": "# CVE-2026-54588: CVE-2026-54588: Account Takeover via Host Header Injection in Poweradmin Authentication\n\n> **CVSS Score:** 9.6\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54588\n\n## Summary\nPoweradmin is affected by a critical Host Header Injection vulnerability within its Single Sign-On (SSO) and logout authentication mechanisms. The application dynamically constructs external redirection and callback URLs using the client-controlled HTTP Host header. An unauthenticated attacker can exploit this behavior to poison OAuth and SAML callback parameters, redirecting authentication credentials directly to a malicious external server. This allows full administrative account takeover without credentials when a victim accesses a manipulated authentication link.\n\n## TL;DR\nUnauthenticated remote attackers can capture OAuth authorization codes or SAML assertions by poisoning the client-controlled HTTP Host header during authentication initialization, leading to complete account takeover of Poweradmin administrators.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **Vulnerability ID**: CVE-2026-54588\n- **CWE ID**: CWE-20\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 9.6\n- **Exploit Maturity**: PoC / Manual\n- **Impact**: Administrative Account Takeover\n\n## Affected Systems\n\n- Poweradmin authentication flow components\n- **Poweradmin**: < 4.2.4 (Fixed in: `4.2.4`)\n- **Poweradmin**: >= 4.3.0, < 4.3.3 (Fixed in: `4.3.3`)\n\n## Mitigation\n\n- Enforce strict base URL validation using a static configuration value rather than HTTP request headers\n- Deploy a catch-all server block at the reverse proxy layer to drop unvalidated host requests\n- Configure strict redirect URI whitelist match patterns inside the Identity Provider configuration\n\n**Remediation Steps:**\n1. Locate the Poweradmin deployment directory and identify the running version\n2. Download and deploy Poweradmin v4.2.4 (if using the 4.2 branch) or v4.3.3 (if using the 4.3 branch)\n3. Configure the absolute base URL parameter inside the settings configuration file\n4. Verify that the reverse proxy is configured to discard requests containing invalid Host headers\n5. Confirm that the SSO Identity Provider does not allow wildcard matches in the Redirect URI whitelist\n\n## References\n\n- [Poweradmin Release v4.2.4](https://github.com/poweradmin/poweradmin/releases/tag/v4.2.4)\n- [Poweradmin Release v4.3.3](https://github.com/poweradmin/poweradmin/releases/tag/v4.3.3)\n- [GitHub Security Advisory GHSA-3735-5339-xfwx](https://github.com/poweradmin/poweradmin/security/advisories/GHSA-3735-5339-xfwx)\n- [NVD CVE-2026-54588](https://nvd.nist.gov/vuln/detail/CVE-2026-54588)\n- [CVE.org CVE-2026-54588](https://www.cve.org/CVERecord?id=CVE-2026-54588)\n- [OSV Advisory Record](https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54588.json)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54588) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-28T17:31:58.902122Z"}, {"uuid": "521f0465-989e-42c0-8f21-684e813102cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54588", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrpyp3ssee2v", "content": "CVE-2026-54588 - poweradmin\nThe Poweradmin DNS tool has a security flaw that allows an attacker to take control of an account without knowing the password. This is because the tool doesn't properly check\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#poweradmin #composer #CVE #infosec", "creation_timestamp": "2026-07-28T18:04:05.824888Z"}, {"uuid": "efebce45-4f82-43e1-b9bb-d06bb074868f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54588", "type": "published-proof-of-concept", "source": "https://github.com/poweradmin/poweradmin/security/advisories/GHSA-3735-5339-xfwx", "content": "", "creation_timestamp": "2026-07-28T18:35:06.103133Z"}]}