NN-2026:9-01

csafUSnozomi_psirt

Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0

view advisory published 2026-07-07

A published security advisory; the vulnerabilities below are the ones it describes.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-31982US——
An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of a user-controlled redirection parameter. An unauthenticated…
02

remediations (4)

  • MitigationCMC

    Use internal firewall features to limit access to the web management interface.

  • MitigationGuardian

    Use internal firewall features to limit access to the web management interface.

  • FixedCMC

    Upgrade to v26.2.0 or later.

  • FixedGuardian

    Upgrade to v26.2.0 or later.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan