CVE-2026-10839

CVE-2026-10839 is a medium-severity vulnerability rated 5.1/10 on the CVSS scale. Open redirection vulnerability in the authentication system allows an attacker to use manipulated values in the X-Forwarded-Host header to alter the URLs generated by the application. A successful exploit could redirect authenticated users to malicious sites following login procedures or interaction with the interface, resulting in limited impact on confidentiality and integrity.. EPSS estimates a 0.42% chance of exploitation in the next 30 days.