CVE-2026-94216: ST Engineering iDirect Evolution/Velocity WebServer Evolution HTTP Header webserver authorize redirect

Published Sep 21, 2026
·
Updated

A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This vulnerability affects the function authorize of the file /usr/sbin/webserver of the component HTTP Header Handler. Executing a manipulation of the argument Success can lead to open redirect. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component
ST Engineering iDirect Evolution Velocity WebServer Evolution<=20260717

Event History

Sep 21, 2026
CVE Published
via MITRE·12:45 PM
Data Sourced
via MITRE·12:45 PM
DescriptionSeverityWeakness

Frequently Asked Questions

1

What does an attacker need to exploit this issue?

An attacker can exploit the issue remotely by manipulating the Success argument handled by the authorize function. The vector indicates no privileges are required, but user interaction is required.

2

Which deployments are affected?

The issue affects ST Engineering iDirect Evolution and Velocity WebServer Evolution through 20260717, specifically the HTTP Header Handler in /usr/sbin/webserver.

3

Is there evidence that exploitation is practical?

Yes. A public exploit disclosure exists and may be used, and the attack complexity is rated low.

4

What is the expected impact?

The vulnerability enables an open redirect and is rated medium severity with an integrity impact of low. No confidentiality or availability impact is identified in the supplied vector.

5

Is a vendor fix or response available?

The available information does not identify a fix. It states that the vendor was contacted before disclosure but did not respond.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203