{"id":"CVE-2026-67176","kind":"vulnerability","aliases":["CVE-2026-67176"],"related":[],"title":"Chargemap: login endpoint open redirect sends users to attacker sites","description":"Chargemap contains an open redirect vulnerability in the authentication login endpoint. A remote, unauthenticated attacker could send a crafted URL to a victim and redirect them to an attacker controlled domain. Fixed 2026-07-17.","summary":"Chargemap's authentication login endpoint does not validate redirect targets, so a crafted link can send a victim to an attacker-controlled domain. An attacker gets a phishing path that looks like it starts on the trusted Chargemap site.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["chargemap","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T22:19:17+00:00","first_seen_at":"2026-11-10T22:27:30+00:00","triaged_at":"2026-11-10T22:30:42+00:00","updated_at":"2026-11-10T22:30:42+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-10T22:30:42Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Chargemap: login endpoint open redirect sends users to attacker sites","impact":"low","summary":"Chargemap's authentication login endpoint does not validate redirect targets, so a crafted link can send a victim to an attacker-controlled domain. An attacker gets a phishing path that looks like it starts on the trusted Chargemap site.","audience":"everyone","category":"vendor","nicknames":[],"who_cares":["chargemap"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"victim is redirected to attacker site for phishing","analyst_note":"Confirm which Chargemap product and version is affected and whether a fix is published; the NVD entry gives only the description and a fix date of 2026-07-17.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000635,"input_tokens":4524,"output_tokens":365,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-07':92C '-17':93C '-2026':12A,15A '-67176':13A,16A '2026':91C 'attack':9A,40B,44B,73C,87C 'attacker-control':39B 'authent':21B,67C 'chargemap':1A,17B,19B,57B,59C 'contain':60C 'control':41B,88C 'could':74C 'craft':31B,77C 'cve':11A,14A 'domain':42B,89C 'endpoint':3A,23B,69C 'fix':90C 'get':45B 'like':51B 'link':32B 'login':2A,22B,68C 'look':50B 'open':4A,62C 'path':48B 'phish':47B 'redirect':5A,27B,63C,83C 'remot':71C 'send':6A,34B,75C 'site':10A,58B 'start':53B 'target':28B 'trust':56B 'unauthent':72C 'url':78C 'user':7A 'valid':26B 'vendor':18B 'victim':36B,81C 'vulner':64C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["chargemap","medium","vendor"],"campaign_type":null,"search_a":"'-2026':12A,15A '-67176':13A,16A 'attack':9A 'chargemap':1A 'cve':11A,14A 'endpoint':3A 'login':2A 'open':4A 'redirect':5A 'send':6A 'site':10A 'user':7A","search_b":"'attack':40B,44B 'attacker-control':39B 'authent':21B 'chargemap':17B,19B,57B 'control':41B 'craft':31B 'domain':42B 'endpoint':23B 'get':45B 'like':51B 'link':32B 'login':22B 'look':50B 'path':48B 'phish':47B 'redirect':27B 'send':34B 'site':58B 'start':53B 'target':28B 'trust':56B 'valid':26B 'vendor':18B 'victim':36B","search_c":"'-07':92C '-17':93C '2026':91C 'attack':73C,87C 'authent':67C 'chargemap':59C 'contain':60C 'control':88C 'could':74C 'craft':77C 'domain':89C 'endpoint':69C 'fix':90C 'login':68C 'open':62C 'redirect':63C,83C 'remot':71C 'send':75C 'unauthent':72C 'url':78C 'victim':81C 'vulner':64C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:19:17+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"9119a7d8-5eab-497f-8521-727c672e3725","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-67176","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67176","severity":null,"published_at":"2026-11-10T22:19:17+00:00","modified_at":"2026-11-10T22:19:17+00:00","first_seen_at":"2026-11-10T22:27:30+00:00","fetched_at":"2026-11-10T22:27:30+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}