CWE-601

1,629 vulnerabilities with CWE-601

CVE-2026-22912 MEDIUM

SICK TDC-X401GL Firmware < 1.5.0 - Open Redirect via Login Parameter

CVSS 4.3

CVE-2026-0513 MEDIUM

SAP Supplier Relationship Management - Unauthenticated Open Redirect via SICF Handler

CVSS 4.7

CVE-2026-22032 MEDIUM

Directus < 11.14.0 - Unauthenticated Open Redirect via SAML RelayState Parameter

CVSS 4.3

CVE-2026-21879 MEDIUM

kanboard < 1.2.49 - Open Redirect via URL Validation Bypass

CVSS 4.7

CVE-2025-32748 MEDIUM

Dell PowerFlex Rack - URL Redirection to Untrusted Site ('Open Redirect')

CVSS 4.3

CVE-2025-26483 MEDIUM

Dell PowerFlex Manager (Appliance) - URL Redirection to Untrusted Site ('Open Redirect')

CVSS 6.1

CVE-2025-65954 MEDIUM

SimpleSAMLphp CAS Server <6.3.1 and <7.0.0 Logout - Open Redirect

CVSS 6.1

CVE-2025-61669 MEDIUM

jupyter_server next parameter open redirect can redirect users to external domains

CVSS 6.1

CVE-2025-66447 NONE

Chamilo LMS has validation-less redirect on login page

CVE-2025-61166 MEDIUM

Ascertia SigningHub User v10.0 - Open Redirect

CVSS 6.1

CVE-2025-70032 MEDIUM

Sunbird-Ed SunbirdEd-portal 1.13.4 - Open Redirect

CVSS 6.1

CVE-2025-70037 MEDIUM

Linagora Twake 2023.Q1.1223 - Open Redirect

CVSS 6.1

CVE-2025-69725 MEDIUM

go-chi/chi >=5.2.2 - Open Redirect via RedirectSlashes Function

CVSS 4.7

CVE-2025-71244 MEDIUM

SPIP 4.3.0-4.3.9 - Open Redirect via Login Form in AJAX Mode

CVSS 6.1

CVE-2025-27900 MEDIUM

IBM DB2 Recovery Expert 5.5 IF002 - Open Redirect

CVSS 6.8

CVE-2025-65717 MEDIUM

Visual Studio Code Extensions Live Server <5.7.9 - Info Disclosure

CVSS 4.3

CVE-2025-2418 MEDIUM

TR7 Web Application Firewall 4.30-16022026 - Open Redirect

CVSS 4.3

CVE-2025-66596 MEDIUM

Yokogawa FAST/TOOLS R9.01-R10.04 - Open Redirect via Invalid Host Header

CVSS 6.1

CVE-2025-67852 LOW

Moodle < 4.1.22 - Open Redirect via OAuth Login Flow

CVSS 3.5

CVE-2025-68616 HIGH

WeasyPrint < 68.0 - Server-Side Request Forgery via HTTP Redirect Bypass

CVSS 7.5

CVE-2025-68470 MEDIUM

React Router 6.0.0-6.30.1 and 7.0.0-7.9.5 - Open Redirect via navigate() or Link Component

CVSS 6.5

CVE-2025-14524 MEDIUM

curl Cross-Protocol Redirect - OAuth2 Bearer Token Disclosure

CVSS 5.3

CVE-2025-61782 MEDIUM

OpenCTI < 6.8.3 - Open Redirect via SAML RelayState Parameter

CVSS 5.4

CVE-2025-15112 MEDIUM

Ksenia Security lares firmware 1.6 - URL Redirection via cmdOk.xml redirectPage Parameter

CVSS 5.4

CVE-2025-15258 LOW

Edimax BR-6208AC 1.02/1.03 - Open Redirect via wlan-url Parameter in formALGSetup

CVSS 3.5