ZeroDay Findings
Sign inSign up

Findings

CVE-2026-2971

A vulnerability was found in a466350665 Smart-SSO up to 2.1.1.

Published Feb 23, 2026 · updated Jun 17, 2026 · a466350665 smart-sso

A vulnerability was found in a466350665 Smart-SSO up to 2.1.1. Affected by this issue is some unknown functionality of the file smart-sso-server/src/main/resources/templates/login.html of the component Login. Performing a manipulation of the argument redirectUri results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 23, 2026 · NIST NVD

    Detected

    A vulnerability was found in a466350665 Smart-SSO up to 2.1.1. Affected by this issue is some unknown functionality of the file smart-sso-server/src/main/resources/templates/login.html of the component Login. Performing a manipulation of the argument redirectUri results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used. T

  2. Jun 17, 2026 · NIST NVD

    Updated

    A vulnerability was found in a466350665 Smart-SSO up to 2.1.1. Affected by this issue is some unknown functionality of the file smart-sso-server/src/main/resources/templates/login.html of the component Login. Performing a manipulation of the argument redirectUri results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used. T

Affected

  • cpe a466350665/smart-ssoversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-2971

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-2971

    A vulnerability was found in a466350665 Smart-SSO up to 2.1.1. Affected by this issue is some unknown functionality of the file smart-sso-server/src/main/resources/templates/login.html of the component Login. Performing a manipulation of the argument redirectUri results in cross

    nvd.nist.gov

References