CVE-2026-51954 — Vulnerability intelligence

—

Published: 2026-10-22T00:00:00.000Z

CVSS

8.1

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirect_uri.

Sources

• CVE-2026-51954
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-51954