CVE-2026-4799

MediumCVSS 4.3

Published: 31/03/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Search Guard FLX up to version 4.0.1 allows redirecting users to an untrusted URL via specially crafted requests.

An attacker could use this for phishing, redirecting users to malicious sites and stealing their credentials.

Update Search Guard FLX to a version later than 4.0.1. Implement server-side URL validation.

Original NVD description (English source)

In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL.