CVE-2026-77433 | Kiwi TCMS up to 16.1 Account Confirmation tcms/kiwi_auth/views.py get_redirect_url next

A vulnerability was found in Kiwi TCMS up to 16.1 and classified as problematic. This impacts the function get_redirect_url of the file tcms/kiwi_auth/views.py of the component Account Confirmation. Executing a manipulation of the argument Next can lead to open redirect.

This vulnerability is handled as CVE-2026-77433. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More