CVE-2026-13387: Low severity vulnerability
Published Nov 10, 2026
·Updated
A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected to unintended external content under specific conditions.
Event History
Nov 10, 2026
CVE Published
via MITRE·05:48 AM
Data Sourced
via MITRE·05:48 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:17 AM
DescriptionSeverity
Frequently Asked Questions
1
Does exploitation require user interaction or authentication?
Exploitation requires user interaction, but it does not require privileges or authentication.
2
What network position does an attacker need?
The attack vector is adjacent network, meaning the attacker must be on a network adjacent to the affected system rather than able to exploit it solely over the internet.
3
What is the expected security impact?
The issue has low severity with low confidentiality impact. No integrity or availability impact is indicated.