CVE-2026-79650: Apache CXF: OIDC RP Open Redirect
Apache CXF’s OIDC relying party can redirect authenticated users to an attacker-controlled URL.
Stories per day · 30 days
2 RSS
4 stories, newest first · one card per story
Stories tagged #open-redirect
Hitachi Energy FACTS Control Platform (FCP)
CISA republished Hitachi Energy's advisory on five flaws, including two critical CVSS 9.9 issues, in the FACTS Control Platform GWS component for grid systems.
2
CVE-2026-73191: Apache Syncope: CAS service URL injection via Forwarded HTTP headers
Apache Syncope SRA CVE-2026-73191 enables CAS service URL injection via Forwarded HTTP headers.
Open Redirect on FortiSIEM
Fortinet disclosed an open redirect flaw (CVSS 2.8) in FortiSIEM allowing authenticated attackers to redirect users to arbitrary websites via crafted HTTP requests.