If you learned from my posts, inspired, or encouraged to grow in the cybersecurity and digital forensics, I would really appreciate your vote and support - Husam Shbib!
MyCyberNews
← Back to feed
Vulnerabilities & PatchesEmerging1 sourceAug 29, 2026 · 17:17via CVEFeed

CVE-2026-82464 - pac4j-core before 6.5.6 Open Redirect via Backslash Logout

Brief

CVE ID : CVE-2026-82464

Published : Aug. 29, 2026, 5:17 p. m.

  • 3 hours, 57 minutes ago

Description : pac4j-core before 6.

  • 6 contains an open redirect vulnerability in DefaultLogoutLogic. perform() that accepts backslash-prefixed logout redirect targets matching logoutUrlPattern. Attackers can craft logout links with backslash-prefixed external hosts that browsers normalize into network-path references, redirecting victims to attacker-controlled sites after logout.

Severity: 6.1

  • MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Read more on CVEFeed→
Vulnerabilities & PatchesCVE-2026-82464