CWE-601

1,629 vulnerabilities with CWE-601

CVE-2026-42230 MEDIUM

n8n: Open Redirect in MCP OAuth Consent Flow

CVSS 6.1

CVE-2026-41226 MEDIUM

Ricoh Company, Ltd. Multiple Laser Printers And MFPs Which Implement Web Image Monitor - Open Redirect

CVSS 4.7

CVE-2026-42525 MEDIUM

Jenkins Microsoft Entra ID Plugin <=666.v6060de32f87d - Open Redirect

CVSS 4.3

CVE-2026-30346 MEDIUM

hunvreus DevPush 0.3.2 - Open Redirect via Google Authorize Endpoint

CVSS 4.3

CVE-2026-33102 CRITICAL

Microsoft 365 Copilot Elevation of Privilege Vulnerability

CVSS 9.3

CVE-2026-41126 MEDIUM

BigBlueButton has Open Redirect through bigbluebutton/api/join via get-parameter "logoutURL"

CVSS 4.3

CVE-2026-40905 HIGH

LinkAce: Password Reset Poisoning via X-Forwarded-Host Header Injection Leading to Account Takeover

CVSS 8.1

CVE-2026-34315 MEDIUM

Oracle WebLogic Server 12.2.1.4.0 to 15.1.1.0.0 - Unauthorized Data Modification

CVSS 6.5

CVE-2026-34284 MEDIUM

Oracle BPM Suite 12.2.1.4.0 and 14.1.2.0.0 - Unauthorized Data Access

CVSS 6.1

CVE-2026-34283 MEDIUM

Oracle Identity Manager 12.2.1.4.0 and 14.1.2.0.0 - Unauthorized Data Access

CVSS 6.1

CVE-2026-40299 MEDIUM

next-intl <4.9.1 Middleware - Open Redirect

CVE-2026-40255 MEDIUM

@adonisjs/http-server redirect().back() - Open Redirect

CVSS 6.1

CVE-2026-20060 MEDIUM

Cisco Unity Connection Open Redirect Vulnerability

CVSS 4.7

CVE-2026-40096 MEDIUM

immich: Open Redirect via Shared Album name

CVSS 5.4

CVE-2026-21741 LOW

FortiNAC-F 7.2.0-7.6.5 - Authenticated Open Redirect via Crafted CSV File

CVSS 2.4

CVE-2026-34257 MEDIUM

Open Redirect vulnerability in SAP NetWeaver Application Server ABAP

CVSS 6.1

CVE-2026-6203 MEDIUM

User Registration & Membership <= 5.1.4 - Unauthenticated Open Redirect via 'redirect_to_on_logout' Parameter

CVSS 6.1

CVE-2026-39940 MEDIUM

ChurchCRM <7.0.0 DonatedItemEditor.php linkBack - Open Redirect

CVE-2026-32932 MEDIUM

Chamilo LMS Session Course Edit page - Open Redirect

CVSS 4.7

CVE-2026-22560 MEDIUM

Rocket.Chat < 8.4.0 - Open Redirect via SAML Endpoint Parameter Manipulation

CVSS 5.3

CVE-2026-25854 MEDIUM

Apache Tomcat: Occasionally open redirect

CVSS 6.1

CVE-2026-39985 MEDIUM

LORIS Login redirect Parameter - Open Redirect

CVSS 4.3

CVE-2026-40037 MEDIUM

OpenClaw < 2026.3.31 - Unsafe Request Body Replay via fetchWithSsrFGuard Cross-Origin Redirects

CVSS 6.5

CVE-2026-39484 MEDIUM

WordPress Hide My WP Ghost plugin < 7.0.00 - Open Redirection vulnerability

CVSS 4.7

CVE-2026-23818 HIGH

Open Redirect Vulnerability in HPE Aruba Networking Private 5G Core On-Prem

CVSS 8.8