CVE-2026-44503

🗓️ 14 May 2026 16:16:24Reported by [email protected]Type

Kiota RedirectHandler fails to strip headers on redirects; only Authorization is removed.

Reporter	Title	Published	Views	Family All 35
ATTACKERKB	CVE-2026-44503	14 May 202615:58	–	attackerkb
Chainguard	CVE-2026-44503 vulnerabilities	7 May 202619:18	–	cgr
Circl	CVE-2026-44503	30 Apr 202622:11	–	circl
CNNVD	Kiota Java Libraries 输入验证错误漏洞	14 May 202600:00	–	cnnvd
CVE	CVE-2026-44503	14 May 202615:58	–	cve
Cvelist	CVE-2026-44503 Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect	14 May 202615:58	–	cvelist
EUVD	EUVD-2026-30323	14 May 202615:58	–	euvd
Github Security Blog	Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect	7 May 202601:49	–	github
OSV	CGA-CG9G-RQH6-8QCP	7 May 202620:01	–	osv
OSV	CLEANSTART-2026-CN27900 Security fixes for CVE-2025-63811, CVE-2026-1229, CVE-2026-24051, CVE-2026-25680, CVE-2026-25681, CVE-2026-26958, CVE-2026-27136, CVE-2026-27145, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-33816, CVE-2026-34986, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39883, CVE-2026-41602, CVE-2026-41889, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-44503, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-78h2-9frx-2jm8, ghsa-7j59-v9qr-6fq9, ghsa-j88v-2chj-qfwx, ghsa-p77j-4mvh-x3m3, ghsa-pjcq-xvwq-hhpj, ghsa-wf45-q9ch-q8gh, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.20.4-r0, 1.20.4-r1, 1.20.4-r2, 1.20.4-r3, 1.20.4-r4, 1.20.4-r5, 1.20.4-r6, 1.21.4-r0	8 Jun 202612:27	–	osv