CWE-601

1,628 vulnerabilities with CWE-601

CVE-2026-48895 HIGH

Apache APISIX: Cas-auth Host header influence on CAS service URL

CVSS 7.2

CVE-2026-44915 MEDIUM

Apache APISIX: Cas-auth plugin open redirect via unsanitized cookie value

CVSS 6.1

CVE-2026-12049 MEDIUM

pgAdmin 4: Open redirect in multi-factor authentication flow via unvalidated 'next' parameter

CVSS 4.3

CVE-2026-55237 HIGH

AutoGPT SignUp Page has DOM-Based XSS and Open Redirect

CVSS 8.8

CVE-2026-20178 MEDIUM

Cisco Webex App - URL Redirection to Untrusted Site ('Open Redirect')

CVSS 4.3

CVE-2026-10839 MEDIUM

Password Manager X-Forwarded-Host - Open Redirect

CVE-2026-10837 MEDIUM

Password Manager X-Forwarded-Host - Open Redirect

CVE-2026-46955 HIGH

Oracle Human Resources 12.2.3-12.2.15 - Unauthenticated Remote Code Execution via HTTP

CVSS 7.5

CVE-2026-46894 HIGH

Oracle iSupplier Portal 12.2.3-12.2.15 - Authenticated Remote Code Execution via Home Page

CVSS 8.0

CVE-2026-46806 HIGH

Oracle WebCenter Content 14.1.2.0.0 - Unauthenticated Data Access and Manipulation via HTTPS

CVSS 8.2

CVE-2026-46796 HIGH

Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 - Remote Code Execution via HTTP

CVSS 8.0

CVE-2026-35302 HIGH

Oracle WebLogic Server 12.2.1.4.0 and 14.1.1.0.0 - Unauthenticated Remote Code Execution via Console

CVSS 8.3

CVE-2026-35259 HIGH

Oracle WebLogic Server 14.1.2.0.0 and 15.1.1.0.0 - Unauthenticated Remote Code Execution via Console

CVSS 8.8

CVE-2026-35258 HIGH

Oracle WebLogic Server 14.1.2.0.0 and 15.1.1.0.0 - Unauthorized Data Access and Modification via Console

CVSS 8.7

CVE-2026-53523 MEDIUM

Nezha Monitoring: OAuth2 Redirect URL — Host Header Injection

CVSS 6.8

CVE-2026-50089 MEDIUM

Aqara IAM/SSO Gateway open redirect

CVSS 6.1

CVE-2026-46616 MEDIUM

Umbraco CMS Surface Controllers - Open Redirect

CVSS 5.4

CVE-2026-48856 MEDIUM

httpc leaks Authorization header to cross-origin redirect targets

CVSS 6.5

CVE-2026-45566 MEDIUM

Roxy-WI: Open redirect on /login?next= via basic-auth userinfo syntax bypass

CVSS 6.1

CVE-2026-53440 MEDIUM

Jenkins - URL Redirection to Untrusted Site ('Open Redirect')

CVSS 4.3

CVE-2026-53437 MEDIUM

Jenkins - URL Redirection to Untrusted Site ('Open Redirect')

CVSS 4.3

CVE-2026-53436 MEDIUM

Jenkins - URL Redirection to Untrusted Site ('Open Redirect')

CVSS 4.3

CVE-2026-41706 MEDIUM

Spring Security - Open Redirect When Using CookieRequestCache

CVSS 6.1

CVE-2026-41008 MEDIUM

Spring Security Authorization Server Open Redirect via request_uri

CVSS 6.1

CVE-2026-47991 MEDIUM

Adobe Experience Manager | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)

CVSS 4.3