CWE-601

1,628 vulnerabilities with CWE-601

CVE-2026-9245 MEDIUM

Devolutions Server - URL Redirection to Untrusted Site ('Open Redirect')

CVSS 5.0

CVE-2026-2813 MEDIUM

Unvalidated Redirect in ArcGIS Server

CVSS 4.7

CVE-2026-7504 HIGH

Org.keycloak/keycloak-services: open redirect when using wildcard valid redirect uris in keycloak

CVSS 8.1

CVE-2026-45037 HIGH

Tabby: Unsafe protocol handler execution via terminal linkifier allows arbitrary OS protocol invocation

CVSS 7.1

CVE-2026-42207 MEDIUM

Magento LTS: Open Redirect via Unvalidated `uenc` Parameter in `stockAction()` - magento-lts

CVSS 6.1

CVE-2026-44427 NONE

MCP Registry: Open Redirect

CVE-2026-44520 MEDIUM

Docling-Graph: SSRF via Missing Internal IP Validation in URLInputHandler

CVSS 5.7

CVE-2026-45448 MEDIUM

ntopng - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

CVSS 4.3

CVE-2026-44503 HIGH

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

CVE-2026-44437 MEDIUM

Angular SSR: Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

CVSS 6.1

CVE-2026-45055 HIGH

CubeCart: Pre-Authenticated Password Reset Link Poisoning via HTTP Host Header

CVSS 8.1

CVE-2026-44372 MEDIUM

Nitro: Open Redirect via Protocol-Relative URL Bypass in Wildcard Route Rules

CVSS 6.1

CVE-2026-41513 MEDIUM

Horilla: Open Redirect via Unvalidated `next` Parameter in Notification Endpoints

CVE-2026-42565 MEDIUM

@workos/authkit-session: Open Redirect via state-derived redirect target

CVSS 4.3

CVE-2026-42350 MEDIUM

Kargo: Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter

CVE-2026-42195 LOW

Unvalidated gitlab URL parameter redirects OAuth authorize step to attacker-controlled host

CVSS 3.4

CVE-2026-3318 MEDIUM

Cradle eCommerce Login returnUrl Parameter - Open Redirect

CVE-2026-43941 CRITICAL

Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click

CVSS 9.6

CVE-2026-42259 MEDIUM

Saltcorn: Open Redirect in `POST /auth/login` due to incomplete `is_relative_url` validation (backslash bypass)

CVE-2026-6795 CRITICAL

Open Redirect in DivvyDrive Information Technologies' DivvyDrive

CVSS 9.6

CVE-2026-41670 HIGH

Admidio: SAML Response Sent to Unvalidated Assertion Consumer Service URL from AuthnRequest

CVSS 8.2

CVE-2026-40332 MEDIUM

Masa CMS open redirect via improper handling of scheme-relative URLs

CVE-2026-43576 HIGH

OpenClaw < 2026.4.5 - Second-hop SSRF via CDP /json/version WebSocket URL

CVSS 7.7

CVE-2026-35253 MEDIUM

Oracle Macaron Tool v0.22.0 - Unauthenticated Origin Validation Error via HTTP

CVSS 4.7

CVE-2026-42230 MEDIUM

n8n: Open Redirect in MCP OAuth Consent Flow

CVSS 6.1