An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic.
Impact
Mautic's public form submission endpoint has an Open Redirect vulnerability, allowing an unauthenticated attacker to redirect visitors to an external website after form submission. Affected versions include 1.0.0-beta to 5.2.12, 6.0.0 to 6.0.10, and 7.0.0 to 7.2.2. Exploitation requires the victim to submit a form prepared by the attacker.
Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.Exploitation requires the victim to submit a form prepared by the attacker.
What to do
There are no official workarounds. To mitigate this vulnerability without upgrading, configure a reverse proxy or web application firewall rule that blocks redirect responses from /form/submit to hosts other than your Mautic instance and your own websites.
Affected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Vendor not supplied · Mautic
mautic/core
3 ranges
Vendor not supplied · Mautic
mautic/core
Compare with this publisher’s ranges. This does not inspect your installation.
affected
1.0.0-beta → before 5.2.12
semver versions
6.0.0 → before 6.0.10
semver versions
7.0.0 → before 7.2.2
semver versions
Other versions: unaffected
Original source description
An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic. After a form is submitted, the application redirects the visitor to a return address supplied with the submission without verifying that it points to the Mautic instance or another trusted host. An unauthenticated attacker can exploit this to send visitors from a legitimate Mautic domain to an arbitrary external website, for example to phishing pages that imitate the original landing page or to sites that deliver malware. Any Mautic instance with a published form is affected. Exploitation requires the victim to submit a form prepared by the attacker.
Inside the record
Evidence available
Describes the evidence in this view, not whether the product is safe.
Original records
CVE-2026-115196View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.
cve.new JSON →Underlying weaknesses
The source’s classification of what caused the vulnerability.
Contributing organizations · 2
Assigning organization
Additional data publisher
What changed
Follow changesLarge field values are marked as truncated previews. Original source snapshots remain retained.