CVE-2026-67176

5.4 MEDIUMpublic exploit available

Published 2026-11-10 · Updated 2026-11-10

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Chargemap contains an open redirect vulnerability in the authentication login endpoint. A remote, unauthenticated attacker could send a crafted URL to a victim and redirect them to an attacker controlled domain. Fixed 2026-07-17.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Weaknesses

CWE-601

Public exploit & PoC references

https://github.com/praksokchea/CVE-2026-67176

All references

https://github.com/praksokchea/CVE-2026-67176
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-313-02.json
https://www.cve.org/CVERecord?id=CVE-2026-67176

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2024-12141
MEDIUMCVE-2024-2372
MEDIUMCVE-2024-4989PoC
MEDIUMCVE-2024-58389PoC
MEDIUMCVE-2024-58398PoC
MEDIUMCVE-2026-100523PoC
CRITICALCVE-2026-101090PoC
MEDIUMCVE-2026-101151

Related by shared AI tags and CWE weakness class. Browse the full archive.