CVE-2026-51954: Webasyst Framework vulnerability
Published Oct 22, 2026
·Updated
An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirecturi.
Affected Software
1 affected component
Webasyst Framework<=4.0.3
Event History
Oct 22, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
Which Webasyst Framework versions are affected?
Webasyst Framework 4.0.3 and earlier are identified as affected.
2
What does an attacker need to exploit this issue?
The issue is exploitable remotely using a crafted OAuth authorization URL that supplies an arbitrary redirect_uri.