CVE-2026-96773

Name of the Vulnerable Software and Affected Versions Intelliants Subrion CMS versions prior to 4.2.2

Description A weakness in the Login Page component allows for a remote open redirect. This occurs through the manipulation of the $ SERVER['HTTP REFERER'] variable within the iaUsers::authorize() function located in the front/login.php file. An open redirect is a flaw that allows an attacker to redirect users to an external, potentially malicious website.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.