Medium severity5.3NVD Advisory· Published Apr 10, 2026· Updated Apr 17, 2026
CVE-2026-22560
CVE-2026-22560
Description
An open redirect vulnerability in Rocket.Chat versions prior to 8.4.0 allows users to be redirected to arbitrary URLs by manipulating parameters within a SAML endpoint.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*range: <8.4.0
- (no CPE)range: <8.4.0
Patches
Vulnerability mechanics
References
2- github.com/RocketChat/Rocket.Chat/pull/38994nvdIssue Tracking
- hackerone.com/reports/3418031nvdIssue Tracking
News mentions
0No linked articles in our index yet.