CVE-2026-66773

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-66773

CVE-2026-66773 describes a vulnerability where a server-controlled __next URL in an OData service can disclose sensitive authentication information and inject untrusted data due to cross-origin checks not being applied. The impact is stated as high impact on confidentiality and low impact on inte...