CVE-2025-61166
An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.
Published Apr 6, 2026 · updated Jun 17, 2026 · ascertia signinghub
An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 6, 2026 · NIST NVD
Detected
An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.
Jun 17, 2026 · NIST NVD
Updated
An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.
Affected
- cpe ascertia/signinghub10.0
- cpe ascertia/signinghub8.6.8
Sources
- CVE.orgVulnerability recordCVE-2025-61166
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2025-61166
An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.
nvd.nist.gov