Live › vulnerability › CVE-2026-120327
The click tracking middleware accepts any target URL and redirects visitors to it. An attacker can craft links on the site that send users to external malicious sites.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 10:20 UTC. All times on this page are UTC.
Sites that run the affected click tracking middleware and expose its redirect path to visitors. The sources do not name the product or version, so exposure cannot be confirmed from them.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to redirect users to external sites.
This page as .md · .json · in your agent: get_signal("CVE-2026-120327")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.