Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-10839

Open redirection vulnerability in Password Manager

Description

Open redirection vulnerability in the authentication system allows an attacker to use manipulated values in the X-Forwarded-Host header to alter the URLs generated by the application. A successful exploit could redirect authenticated users to malicious sites following login procedures or interaction with the interface, resulting in limited impact on confidentiality and integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Password Manager Password Manager

Default version status: unaffected

  • 0 to < 08/07/2025affected
  • 08/07/2025unaffected

References