Open Redirect Vulnerability in MISP Modules Website Component

CVE-2026-128637

What is CVE-2026-128637?

The MISP Modules website component exposes an open redirect flaw in its login endpoint, allowing unauthorized redirects to attacker-controlled URLs. By manipulating the 'next' query parameter, an attacker can create deceptive links that redirect users after they authenticate, potentially leading to phishing attacks. This vulnerability undermines the user trust in the legitimate MISP Modules domain, making it critical to address for securing sensitive user information.

References