Open Redirection Vulnerability in Authentication System of Specific Application

CVE-2026-10839

What is CVE-2026-10839?

This vulnerability allows attackers to manipulate the X-Forwarded-Host header, leading to open redirection issues. By exploiting this flaw, an attacker can redirect authenticated users to malicious websites after they have completed login procedures or interacted with the application interface. Such attacks can compromise user experience and potentially expose users to phishing threats, although the direct impact on data confidentiality and integrity is limited.

References