CVE-2026-80327

An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 (and later).

CVSS 4.0

5.1CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/S:P/AU:N/R:U/RE:M/U:Amber

EPSS

0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-25)

CWE

CWE-601

Published

2026-10-06

Modified

2026-10-06

Record from

the NVD, synced 2026-10-19

References

• https://docs.pingidentity.com/pinggateway/release-notes/preface.html
• https://product-downloads.pingidentity.com/browse/ig/featured
• https://support.pingidentity.com/s/article/SECADV202602-Open-Redirect-in-PingGateway-Fragment-Filter

Check your stackJSON