medium6.8
CVE-2026-118425
Keycloak-services: keycloak-services: redirect uri domain allowlist bypass via dns resolution to loopback
Red Hat · Red Hat Build of Keycloak / Red Hat · Red Hat Build of Keycloak
Your agent Now with CVE context
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
Sponsored by MoxsoBuild security habits with adaptive training and phishing simulations.Opens in a new tabORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV
Find vulnerabilities that affect you.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Severity
25 matching advisories · 25 shown
Follow substantive record changes →SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
high7.5
medium4.7
medium6.1
medium4.7
CVE-2026-111031
Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' Parameter
Unknown · Welcart e-Commerce
high7.7
CVE-2026-117553
Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header Poisoning
umbraco · Umbraco-CMS
low2.1
CVE-2026-116578Fix available
Tornado: Open redirect in RedirectHandler via protocol-relative URLs
medium6.1
CVE-2026-81509
nforwardauth: Unvalidated r parameter allows post-authentication open redirect
nosduco · nforwardauth
medium5.4
CVE-2026-115196
An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic.
mautic/core
low3.5
medium5.4
CVE-2024-4989
Open Redirection via Callback URL in WSO2 API Manager Allows Phishing Attacks
WSO2 · WSO2 API Manager
high8.8
CVE-2026-91579
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security).
Oracle Corporation · Oracle BI Publisher
high7.8
CVE-2026-91549
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).
Oracle Corporation · Oracle Business Intelligence Enterprise Edition
medium4.7
CVE-2026-91526
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server).
Oracle Corporation · Oracle BI Publisher
high7.8
CVE-2026-91328
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC).
Oracle Corporation · JD Edwards EnterpriseOne Tools
medium6.5
CVE-2026-91318
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework).
Oracle Corporation · Oracle JDeveloper
high8.8
CVE-2026-91296
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC).
Oracle Corporation · JD Edwards EnterpriseOne Tools
medium6.5
CVE-2026-103576
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Microsoft · Windows 10 Version 1607 / Microsoft · Windows 10 Version 1809
medium4.8
CVE-2026-83646
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Microsoft · Windows 10 Version 1607 / Microsoft · Windows 10 Version 1809
medium6.1
CVE-2026-83500
Windows BitLocker Security Feature Bypass Vulnerability
Microsoft · Windows 10 Version 1607 / Microsoft · Windows 10 Version 1809
medium6.1
CVE-2026-83589
Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect
Red Hat · Red Hat OpenShift Container Platform 4.12 / Red Hat · Red Hat OpenShift Container Platform 4.14
critical9.6
CVE-2026-61451
Grav API Plugin before 1.0.4 Password Reset Token Poisoning via admin_base_url
getgrav · grav-plugin-api
critical9.3
CVE-2026-41106
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Microsoft · Microsoft 365 Copilot
high7.1
CVE-2026-40037
OpenClaw < 2026.4.8 - Unsafe Request Body Replay via fetchWithSsrFGuard Cross-Origin Redirects
OpenClaw · OpenClaw
medium6.5
CVE-2011-1594
Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter
Red Hat · Red Hat Network Satellite Server v 5.4 / Red Hat · Red Hat Network Satellite Server v 5.4