CVE-2026-58491
Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter
CVSS score
9.3
EPSS probability
%0.5
Risk score
0.0
Published
24 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.7
CVE-2026-63330
Warpgate: Missing Admin Authorization on Live Recording Stream WebSocket Allows Any Authenticated User to Eavesdrop on Terminal Sessions
W
Patch status unknownEPSS %0
6.0
CVE-2026-91167
Warpgate: Missing authorization check on `PUT /users/:id/roles/:role_id` allows any admin to bypass the `AccessRolesAssign` permission boundary
W
Patch status unknownEPSS %0
4.3
CVE-2026-91164
Warpgate: API tokens bypass the user's allowed_ip_ranges restriction
W
Patch status unknownEPSS %0
4.9
CVE-2026-63329
Warpgate: x-warpgate-username Header Not Stripped from Client Requests Enables Identity Spoofing to WebSocket Backend Targets
W
Patch status unknownEPSS %0
5.7
CVE-2026-91166
Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the target
W
Patch status unknownEPSS %0
2.4
CVE-2026-91165
Warpgate: Markup injection in SSO form_post return page via unencoded redirect/error values
W
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-58491"