CVE-2026-115196 Details
Description
An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic. After a form is submitted, the application redirects the visitor to a return address supplied with the submission without verifying that it points to the Mautic instance or another trusted host. An unauthenticated attacker can exploit this to send visitors from a legitimate Mautic domain to an arbitrary external website, for example to phishing pages that imitate the original landing page or to sites that deliver malware. Any Mautic instance with a published form is affected. Exploitation requires the victim to submit a form prepared by the attacker.
A moderate open redirect vulnerability has been identified in the public form submission endpoint of Mautic. This issue affects Mautic versions 1.0.0-beta through 5.2.12, as well as versions 6.0.0 prior to 6.0.10 and 7.0.0 prior to 7.2.2. The vulnerability arises because the application redirects users to a return address provided with the form submission, without verifying that the address is within the Mautic instance or from a trusted host. This flaw allows an unauthenticated attacker to redirect users from a legitimate Mautic domain to an arbitrary external website, potentially leading to phishing or malware distribution. Exploitation requires the victim to submit a form prepared by the attacker.
Users can upgrade to Mautic versions 5.2.12, 6.0.10, or 7.2.2 to address this vulnerability. For those using legacy Mautic 4 releases, general security support is available through the Extended Long-Term Support (ELTS) program.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 26, 2026CISA-ADP
Assessed Oct 26, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/mautic/mautic/security/advisories/GHSA-5mm3-3g7p-9868 | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Mautic | >= 1.0.0-beta, < 5.2.12 (semver) >= 6.0.0, < 6.0.10 (semver) >= 7.0.0, < 7.2.2 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 26, 2026 | CVE Modified | CISA-ADP |
| Oct 26, 2026 | New CVE Received | [email protected] |