VYPR

Tcms

by Kiwitcms

CVEs (1)

  • CVE-2026-54724MedSep 15, 2026
    risk 0.33cvss 6.1epss 0.00

    Kiwi TCMS is an open source test management system. Prior to 16.1, the account confirmation endpoint accepted an unvalidated next parameter, allowing an unauthenticated attacker to create a URL on a trusted Kiwi TCMS hostname that redirects a victim to an arbitrary external…