CWE-601

Low likelihood

URL Redirection to Untrusted Site ('Open Redirect')

Parent: CWE-610 - Externally Controlled Reference to a Resource in Another Sphere

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

1,629 vulnerabilities with CWE-601

CVE-2026-25392 MEDIUM

Update URLs WordPress <=1.4.0 - Open Redirect

CVSS 4.7

CVE-2026-2709 LOW

busy <= 2.5.5 - Open Redirect via Callback Handler

CVSS 3.5

CVE-2026-0573 CRITICAL

GitHub Enterprise Server - Open Redirect

CVSS 9.0

CVE-2026-1296 MEDIUM

Frontend Post Submission Manager Lite <=1.2.7 - Open Redirect

CVSS 6.1

CVE-2026-1277 MEDIUM

WordPress URL Shortify <1.12.1 - Open Redirect

CVSS 4.7

CVE-2026-26003 MEDIUM

FastGPT <4.14.5 - Unauthenticated RCE

CVSS 5.4

CVE-2026-25956 MEDIUM

Frappe <14.99.14-15.94.0 - Open Redirect

CVSS 6.1

CVE-2026-24328 MEDIUM

SAP TAF_APPLAUNCHER - Open Redirect

CVSS 6.1

CVE-2026-24323 MEDIUM

SAP BSP Applications - Reflected Cross-Site Scripting

CVSS 6.1

CVE-2026-0508 HIGH

SAP BusinessObjects - Open Redirect

CVSS 7.3

CVE-2026-0484 MEDIUM

SAP NetWeaver/S/4HANA - Privilege Escalation

CVSS 6.5

CVE-2026-2153 MEDIUM

mwielgoszewski doorman <0.6 - Open Redirect

CVSS 4.3

CVE-2026-25651 MEDIUM

client-certificate-auth 0.2.1-0.3.0 - Open Redirect via Host Header

CVSS 6.1

CVE-2026-1970 LOW

Edimax BR-6258n <1.18 - Open Redirect

CVSS 3.5

CVE-2026-25198 MEDIUM

web2py <= 2.27.1-stable+timestamp.2023.11.16.08.03.57 - Open Redirect via Crafted URL

CVSS 4.7

CVE-2026-20123 MEDIUM

Cisco EPNM/Prime Infrastructure - Open Redirect

CVSS 4.3

CVE-2026-25149 MEDIUM

Qwik < 1.19.0 - Open Redirect via Default Request Handler Middleware

CVSS 6.1

CVE-2026-24052 HIGH

Claude Code <1.0.111 - Info Disclosure

CVSS 7.4

CVE-2026-24768 MEDIUM

NocoDB < 0.301.0 - Open Redirect via continueAfterSignIn Parameter

CVSS 6.1

CVE-2026-1406 LOW

lcg0124 BootDo <5ccd963c74058036b466e038cff37de4056c1600 - Open Red...

CVSS 3.5

CVE-2026-23730 MEDIUM

WeGIA < 3.6.2 - Open Redirect via nextPage Parameter

CVSS 6.1

CVE-2026-23729 MEDIUM

WeGIA < 3.6.2 - Open Redirect via nextPage Parameter in control.php

CVSS 6.1

CVE-2026-23728 MEDIUM

WeGIA < 3.6.2 - Open Redirect via nextPage Parameter

CVSS 6.1

CVE-2026-23727 MEDIUM

WeGIA < 3.6.2 - Open Redirect via nextPage Parameter in control.php

CVSS 6.1

CVE-2026-23726 MEDIUM

WeGIA < 3.6.2 - Open Redirect via nextPage Parameter

CVSS 6.1

Details

Vulnerabilities 1,629

Exploit Likelihood Low

Links