Vulnerability Description
An Open Redirect vulnerability (CWE-601) exists in the OAuth/OIDC authentication implementation of the Axivion Dashboard. The login flow did not properly restrict the post-authentication redirect to the application's own origin, so a user who follows a crafted login link can be sent to an untrusted external site after authenticating against the genuine Dashboard. Because the link points at the legitimate Dashboard, this can be abused for phishing, for example credential or second-factor theft via a convincing look-alike page. Exploitation requires the victim to follow the attacker-supplied link and complete the authentication flow.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-12379?
CVE-2026-12379 is a documented vulnerability. An Open Redirect vulnerability (CWE-601) exists in the OAuth/OIDC authentication implementation of the Axivion Dashboard. The login flow did not properly restrict the post-authentication redirect to t...
How severe is CVE-2026-12379?
CVSS scoring is not yet available for CVE-2026-12379. Check NVD for updates.
Is there a patch for CVE-2026-12379?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.