Veille CVE

Jeudi 1 octobre 2026

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Red Hat OpenShift Container Platform 4.14 » ✕
  1. CVE-2026-83589 6.1 Moyenne

    Red Hat OpenShift Container Platform 4.14 · Red Hat OpenShift Container Platform 4.15 · Red Hat OpenShift Container Platform 4.18 · Red Hat OpenShift Container Platform 4.19

    A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter (`rd`) during post-login redirection. A remote attacker can exploit this vulnerability by enticing a user to follow a specially crafted link, resulting in the user being redirected to an arbitrary external website after authenticating. This open redirect can be leveraged to conduct phishing attacks or credential theft.