CVE-2026-40465

MediumCVSS 5.3

Published: 31/08/2026(UTC)Updated: 03/09/2026(UTC)Translated: 31/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter.

An attacker can redirect users to malicious sites, potentially leading to phishing or data theft.

Strengthen validation of the URL parameter to only allow trusted domains.

Original NVD description (English source)

NSP is vulnerable to an open redirect due to insufficient server-side validation of the URL (or redirect) parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS