CVE-2026-126347 | tornadoweb Tornado up to 6.6.0 URL Parser tornado.web tornado.web.RedirectHandler redirect

November 13, 2026 Yanac

A vulnerability was found in tornadoweb Tornado up to 6.6.0. It has been rated as problematic. This impacts the function tornado.web.RedirectHandler of the file tornado.web of the component URL Parser. This manipulation causes open redirect.

This vulnerability is registered as CVE-2026-126347. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More