CVE-2026-54724 | Kiwi TCMS up to 16.0 Account Confirmation Endpoint Next redirect

September 15, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Kiwi TCMS up to 16.0. Affected by this vulnerability is an unknown functionality of the component Account Confirmation Endpoint. Performing a manipulation of the argument Next results in open redirect.

This vulnerability is cataloged as CVE-2026-54724. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More