CVE-2026-73191
Last modified
CVE-2026-73191 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Syncope. When the Syncope SRA is configured for CAS authentication, the target Apereo CAS instance's URL is calculated by unconditionally looking at client-supplied forwarded HTTP headers. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.7, from 4.1.0-M0 through 4.1.2. Users are recommended to upgrade to version 4.0.8 / 4.1.3, which fix this issue..
Description
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Syncope. When the Syncope SRA is configured for CAS authentication, the target Apereo CAS instance's URL is calculated by unconditionally looking at client-supplied forwarded HTTP headers. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.7, from 4.1.0-M0 through 4.1.2. Users are recommended to upgrade to version 4.0.8 / 4.1.3, which fix this issue.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Apache Syncope | >= 3.0.0-M0, <= 3.0.16; >= 4.0.0-M0, <= 4.0.7; >= 4.1.0-M0, <= 4.1.2 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-73191?
How severe is CVE-2026-73191?
How do I fix CVE-2026-73191?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-73185Unauthenticated SQL Injection in NGG Smart Image Search < 4.…9.3
- CVE-2026-73187Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2…9.3
- CVE-2026-73188Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-73189Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-7319A flaw has been found in elinsky execution-system-mcp 0.1.0.…7.3
- CVE-2026-73190Unauthenticated Cross Site Scripting (XSS) in WPDM – Premium…7.1
- CVE-2026-73192An improper neutralization of input during web page generati…6.1
- CVE-2026-73193DBI versions before 1.652 for Perl allow a heap out-of-bound…9.8
- CVE-2026-73194DBI versions before 1.652 for Perl allow a heap out-of-bound…9.1
- CVE-2026-73195Improper Encoding or Escaping of Output vulnerability in Apa…7.3
- CVE-2026-73196A flaw was found in FreeIPA. A low-privilege authenticated u…6.5
- CVE-2026-73197A flaw was found in FreeIPA. A remote, unauthenticated attac…7.5
Are you affected by CVE-2026-73191?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST