{"id":"CVE-2026-115196","revision":"5137f2f3d59e4c6389dd7525b0598525","records":[{"revision":"5137f2f3d59e4c6389dd7525b0598525","observedAt":"2026-10-26T16:35:30.797+00:00","statement":{"source":"cve-program","id":"CVE-2026-115196","aliases":[],"title":"An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic. After a form is submitted, the application redirects the visitor to a return address supplied with the submission without verifying that …","description":"An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic. After a form is submitted, the application redirects the visitor to a return address supplied with the submission without verifying that it points to the Mautic instance or another trusted host. An unauthenticated attacker can exploit this to send visitors from a legitimate Mautic domain to an arbitrary external website, for example to phishing pages that imitate the original landing page or to sites that deliver malware. Any Mautic instance with a published form is affected. Exploitation requires the victim to submit a form prepared by the attacker.","state":0,"publishedAt":"2026-10-26T12:50:18.637+00:00","modifiedAt":"2026-10-26T15:35:52.657+00:00","affected":[{"ecosystem":"https://packagist.org","name":"mautic/core","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"collectionURL\": \"https://packagist.org\",\n                    \"packageName\": \"mautic/core\",\n                    \"repo\": \"https://github.com/mautic/mautic\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"1.0.0-beta\",\n                            \"lessThan\": \"5.2.12\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"6.0.0\",\n                            \"lessThan\": \"6.0.10\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"7.0.0\",\n                            \"lessThan\": \"7.2.2\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","score":5.4,"severity":"MEDIUM"}],"references":["https://github.com/mautic/mautic/security/advisories/GHSA-5mm3-3g7p-9868"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115196","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-115196","identifiers":["CVE-2026-115196"]},"retained":false,"historicalAffected":[]}],"coverage":[]}