CVE Catalog
CVE-2026-28301
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk0.01%
2th percentile - higher than 2% of all known CVEs
Summary
A vulnerability that allows an attacker to provide a crafted external URL that may redirect a user to an unintended website.
Risk Assessment
The organization may be exposed to phishing or other attacks that could lead to data loss or system compromise.
Recommendation
It is recommended to validate and filter external URLs before use and to educate users about potential threats.
Original NVD description (English source)
A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended website.