HTTP Host Header Attacks 4 Routing-based SSRF 04/04/2026 Web cache poisoning via ambiguous requests 03/04/2026 Host header authentication bypass 02/04/2026 Basic password reset poisoning 01/04/2026