CVE-2026-89122

The SAP NetWeaver Enterprise Portal is vulnerable to an Open Redirect (CWE-601) because a specific portal component fails to sufficiently validate input. An unauthenticated attacker can craft a malicious link that, when clicked by a victim, loads content from an attacker-controlled site within th...

PT-2026-112457

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An open redirect issue exists where the system allows redirection to untrusted sites. This enables an authorized attacker to perform spoofing over a network, whic...

CVE-2026-109409: Improper Neutralization of Special Elements used in a Command

A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function childprocess.exec of the file src/routes/setting/fileManagement/openFolder.ts of the component Open Folder Endpoint. Executing a manipulation of the argument path can lead to command injection. The...

CVE-2026-109160: URL Redirection to Untrusted Site

A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent.getSafeUrl of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java of the component pay Endpoint. Executing a manipulation of the...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-8643-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8643-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Microsoft Windows: CVE-2026-83646: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an authorized attacker to perform spoofing over a network...

PT-2026-111409

Name of the Vulnerable Software and Affected Versions PublicCMS versions prior to 5.202608.a Description A remote open redirect issue exists in the pay endpoint. The problem resides in the SafeConfigComponent.getSafeUrl function within the...

PT-2026-112405

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description An open redirect issue exists where the system can be directed to an untrusted site. This allows an unauthorized attacker to bypass a security feature through a physical attack...

Microsoft Windows: CVE-2026-83500: Windows BitLocker Security Feature Bypass Vulnerability

Url redirection to untrusted site 'open redirect' in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2026-109572

Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/serverid/path to list or stop other...

CVE-2026-109572 Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy

Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/serverid/path to list or stop other...

CVE-2026-109572 Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy

Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/serverid/path to list or stop other...

CVE-2026-109572

Open WebUI versions 0.8.6 before 0.11.4 are vulnerable to a privilege escalation vulnerability within the terminal proxy . This flaw allows authenticated users to bypass authorization and access the Terminals administrator API using a shared key. By sending requests through the /api/v1/terminals/...

CVE-2024-58389

HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py that allows remote attackers to redirect users by supplying an unvalidated next query parameter. BasicLoginHandler and PasswordLoginHandler store the parameter in a nexturl cookie, so crafted login link...

CVE-2024-58389 HoloViz Panel from 1.2.2 before 1.9.0 Open Redirect via next Parameter

HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py that allows remote attackers to redirect users by supplying an unvalidated next query parameter. BasicLoginHandler and PasswordLoginHandler store the parameter in a nexturl cookie, so crafted login link...

CVE-2024-58389 HoloViz Panel from 1.2.2 before 1.9.0 Open Redirect via next Parameter

HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py that allows remote attackers to redirect users by supplying an unvalidated next query parameter. BasicLoginHandler and PasswordLoginHandler store the parameter in a nexturl cookie, so crafted login link...

EUVD-2024-55783

HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py that allows remote attackers to redirect users by supplying an unvalidated next query parameter. BasicLoginHandler and PasswordLoginHandler store the parameter in a nexturl cookie, so crafted login link...

CVE-2024-58389

HoloViz Panel versions 1.2.2 through 1.9.0 are vulnerable to an open redirect vulnerability in the panel/auth.py component. The issue stems from the application's failure to validate the next query parameter, which is processed by both BasicLoginHandler and PasswordLoginHandler. Attackers can cra...

kernel: openvswitch: fix GSO userspace truncation underflow

A flaw was found in the Open vSwitch component of the Linux kernel. This vulnerability arises from an underflow condition when handling Generic Segmentation Offload GSO packets in userspace. A length calculation error can lead to a buffer underflow when data is processed by the skbzerocopy...

CVE-2026-83535

A flaw was found in openstack-network-exporter. When an operator configures user authentication but omits or misconfigures Transport Layer Security TLS, the basic authentication mechanism is silently bypassed. This fail-open design allows an adjacent network attacker to access sensitive Open...