Loading0%
SUBZER0
LIVE

CVE-2026-51954

An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirect_uri.

  • Severity: Unscored
  • Public exploit
  • P4 · Track

Why P4: track.

Description

An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirect_uri.

References

Published 2026-10-22 · sources: NVD, GitHub Advisory Database