Open Redirect Vulnerability in PingGateway by Ping Identity
CVE-2026-80327

5.1MEDIUM

Key Information:

Vendor

Ping Identity

Status
Pinggateway
Vendor
CVE Published:
6 October 2026

What is CVE-2026-80327?

An open redirect vulnerability has been identified in the Fragment Filter feature of PingGateway, which can allow attackers to redirect users to unintended sites, potentially leading to phishing attacks or other malicious activities. This vulnerability effects a wide range of PingGateway versions and has been addressed in subsequent updates. Users are strongly encouraged to upgrade to the fixed versions to mitigate the risks associated with this vulnerability.

Affected Version(s)

PingGateway 7.1.0 <= 7.2.0

PingGateway 2023.2.0 <= 2024.11.1

PingGateway 2025.3.0 <= 2025.11.1

References

https://docs.pingidentity.com/pinggateway/release-notes/p...
release-notes
https://product-downloads.pingidentity.com/browse/ig/feat...
patch
https://support.pingidentity.com/s/article/SECADV202602-O...
vendor-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.