Open Redirect in Misp
CVE-2026-10861
An open redirect vulnerability existed in MISP UsersController::routeafterlogin() because the value stored in the pre_login_requested_url session key was used as the post-login redirect destination without sufficiently enforcing that it wa…
Vulnerability class: Open Redirect
Affected products
- Misp — versions 0