CVE-2026-66773

CVE-2026-66773 describes a vulnerability where a server-controlled __next URL in an OData service can disclose sensitive authentication information and inject untrusted data due to cross-origin checks not being applied. The impact is stated as high impact on confidentiality and low impact on inte...