CVE-2026-10839 — Open redirection vulnerability in Password Manager
Open redirection vulnerability in the authentication system allows an attacker to use manipulated values in the X-Forwarded-Host header to alter the URLs generated by the applic…
Published: 2026-06-17 · CVSS: 5.1 · CVSS 4.0
Open redirection vulnerability in the authentication system allows an attacker to use manipulated values in the X-Forwarded-Host header to alter the URLs generated by the application. A successful exploit could redirect authenticated users to malicious sites following login procedures or interaction with the interface, resulting in limited impact on confidentiality and integrity.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7