Medium severity4.3NVD Advisory· Published Sep 21, 2026· Updated Oct 14, 2026

CVE-2026-94214

Description

A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dxz0069/Wavlink Wn530h4 Command Injection In Set Add Routingreferences
ST Engineering IDirect/iDXllm-create
ST Engineering IDirect/Evo iDXllm-create

Patches

Vulnerability mechanics

References

github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/IDIRECT-WEBSERVER-HOST-REDIRECT-002-vulndb.mdnvd
vuldb.com/cve/CVE-2026-94214nvd
vuldb.com/submit/894245nvd
vuldb.com/vuln/408070nvd
vuldb.com/vuln/408070/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000