CVE-2026-6795
URL redirection to untrusted site ('open redirect') vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Parameter Injection. This issue affects DivvyDrive: from 4.8.2.9 before 4.8.3.2.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.6
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
- EPSS probability
- 0.23%
- CWE
- CWE-601
- Published
- 2026-05-07
- Last modified
- 2026-05-07
Affected products
- DivvyDrive Information Technologies Inc. DivvyDrive
Weakness type
Related vulnerabilities
- CVE-2026-86756 — Snipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayState
- CVE-2026-78377 — Open Redirect in Yordam Informatics's Library Automation System
- CVE-2026-84389 — A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0...
- CVE-2026-86351 — MISP User Homepage Validation Allows Authenticated Open Redirect via Protocol-Relative URL
- CVE-2026-86256 — wger before 2.6 Open Redirect via trainer-login next parameter
- CVE-2026-86205 — h3 before 2.0.1-rc.18 Open Redirect via redirectBack()
- CVE-2026-85676 — Dub Open Redirect via Unrestricted redir_url Parameter
- CVE-2026-53728 — Medplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage