Vulnerabilities & PatchesEmerging1 src
CVE-2026-82464 - pac4j-core before 6.5.6 Open Redirect via Backslash Logout
CVE ID : CVE-2026-82464
Published : Aug. 29, 2026, 5:17 p. m.
• 3 hours, 57 minutes ago
Description : pac4j-core before 6. 5. 6 contains an open redirect vulnerability in DefaultLogoutLogic. perform() that accepts backslash-prefixed logout redirect targets matching logoutUrlPattern. Attackers can craft logout links with backslash-prefixed external hosts that browsers normalize into network-path references, redirecting victims to attacker-controlled sites after logout.
Severity: 6.1
• MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...