CVE-2026-18721

CVE-2026-18721 affects kalcaddle kodbox 1.67 Build 02, specifically the /user/sso/apiLogin handler in the SSO API Login component. The vulnerability arises from improper handling of the callbackUrl parameter, enabling an open redirect. Exploitation is possible remotely, and publicly disclosed exp...