CVE-2026-82726 | ash-project ash_phoenix up to 2.3.24 Helpers AshPhoenix.Helpers.get_subdomain host incorrect regex

August 31, 2026 Yanac

A vulnerability labeled as critical has been found in ash-project ash_phoenix up to 2.3.24. This affects the function AshPhoenix.Helpers.get_subdomain of the component Helpers. The manipulation of the argument host results in incorrect regular expression.

This vulnerability was named CVE-2026-82726. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More