CVE-2026-12379 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the Dashboard OAuth/OIDC implementation of Axivion
Attackers can redirect authenticated users to malicious sites via crafted login links, enabling phishing and credential theft in the Axivion Dashboard.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-12379?
CVE-2026-12379 is a medium-severity vulnerability in Qt Axivion, published on 16 Jul 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
An Open Redirect vulnerability (CWE-601) exists in the OAuth/OIDC authentication implementation of the Axivion Dashboard. The login flow did not properly restrict the post-authentication redirect to the application's own origin, so a user who follows a crafted login link can be sent to an untrusted external site after authenticating against the genuine Dashboard. Because the link points at the legitimate Dashboard, this can be abused for phishing, for example credential or second-factor theft via a convincing look-alike page. Exploitation requires the victim to follow the attacker-supplied link and complete the authentication flow.
Weakness: CWE-601
Which versions are affected by CVE-2026-12379?
How do I fix CVE-2026-12379?
No fix has been published for CVE-2026-12379 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-12379 being exploited?
There is no known exploitation of CVE-2026-12379 in the wild and no public exploit code.
Sources
Also known as GHSA-qwf3-2mwh-ccxc.