CVE-2026-73671

What it is

Saurus CMS Community Edition contains an unauthenticated open redirect vulnerability in the logout handling code in classes/port.inc.php, where the url parameter supplied via GET or POST is passed directly to the Location header without domain allowlist, scheme validation, or relative path enforcement. Attackers can craft a malicious logout URL containing an arbitrary external domain or javascript: URI scheme to redirect authenticated users to attacker-controlled phishing pages after session destruction, enabling credential theft and OAuth redirect abuse.

At a glance

Exploitability

Can be exploited over the network without logging in, but needs a user to act. Limited direct impact.

Exploit odds

0.3% chance of exploitation in the next 30 days (EPSS).

Fix

No patch or advisory is linked yet. Look at mitigations or restrict exposure.

Timeline

1. 2026-08-13 16:19 UTC PublishedDisclosed publicly on CVE.org and NVD
2. 2026-08-31 20:38 UTC Last updatedMost recent change to the record

Details

Published

2026-08-13 16:19 UTC

Last modified

2026-08-31 20:38 UTC

Exploit probability

0.3% · EPSS, next 30 days

Weakness

CWE-601

Record status

Deferred

Attack profile CVSS 4.0 · 5.1

Attack vector

Network

Complexity

Low

Attack requirements

None

Privileges needed

None

User interaction

Active

Confidentiality

Low

Integrity

Low

Availability

None