CVE-2026-10839CWE-601

Open redirection vulnerability in Password Manager

Medium · published June 17, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

Open redirection vulnerability in the authentication system allows an attacker to use manipulated values in the X-Forwarded-Host header to alter the URLs generated by the application. A successful exploit could redirect authenticated users to malicious sites following login procedures or interaction with the interface, resulting in limited impact on confidentiality and integrity.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
EPSS
0.00420 · 35.2th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2026-06-17T11:11Z
EPSS history
Timeline
  • 17 JUN 11:11Z
    Open redirection vulnerability in Password Manager
    cvelistv5