CVE-2026-19078
CVE-2026-19078: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityMedium4.3
Medium [CVE-2026-19078] Open redirect vulnerability enables phishing via unvalidated parameter.
CVE-2026-19078Source published Source updated
A flaw was found in the oauth-server component. This open redirect vulnerability occurs when the 'then' parameter in the grant approval handler is not properly validated. A remote attacker can craft a malicious URL that, when approved or denied by an authenticated user, redirects them to an attacker-controlled website. This could enable phishing attacks, potentially tricking users into revealing sensitive information. Red Hat has determined that this vulnerability is Low severity. The open redirect in the OAuth server's grant handler enables phishing by redirecting users to attacker-controlled origins after the consent prompt, but does not expose OAuth tokens, authorization codes, or session credentials. The authorization code is issued separately to the client's registered redirect_uri.…
- Affected products in this advisory
- Red Hat OpenShift Container Platform 4
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- There is no mitigation for this flaw. However, the risk is limited as the vulnerability only enables phishing — no OAuth tokens, authorization codes, or session credentials are exposed through the redirect.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.