CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.

CVSS 3.1

6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-25)

CWE

CWE-601

Published

2026-04-06

Modified

2026-10-23

Record from

the NVD, synced 2026-10-24

Affected

• ascertia:signinghub

References

• https://linkedin.com/in/thakur-nikhil
• https://medium.com/@rajput.thakur/malicious-open-redirection-cve-2025-61166-bf5d708cd241

Check your stackJSON