CVE-2026-120638 | CGI up to 4.x Redirect CGI.pm redirect

November 4, 2026 Yanac

A vulnerability marked as problematic has been reported in CGI up to 4.x. This vulnerability affects the function redirect of the file CGI.pm of the component Redirect. Performing a manipulation results in open redirect.

This vulnerability is reported as CVE-2026-120638. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More