MEDIUM
nosduco
CVE published 2026-10-26
CVE-2026-81509
CVE-2026-81509 is a post-authentication open redirect vulnerability in nforwardauth, a forward auth service. The issue arises from the unvalidated `r` query parameter on the `/login` endpoint, which can be exploited by an unauthenticated attacker to redirect a victim to an attacker-controlled website after successful authentication. This can facilitate phishing and social-engineering attacks by abusing th [truncated]