CVE-2026-120327

CVE-2026-120327

The click tracking middleware accepts an arbitrary target URL and redirects to it. Attackers can misuse links to the website to redirect users to external sites.

Vulnerability class: Open Redirect

Published · last modified .

EPSS exploit prediction

EPSS: 0.004 (38.4th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 38th percentile — 38.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

The 30-day trend appears once there are two daily scores.

Weakness classification (CWE)

References