CVE-2026-94214
A vulnerability was found in ST Engineering iDirect iDX and Evo iDX.
Published Sep 21, 2026 · updated Oct 14, 2026
A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
Timeline
Detection, updates, and resolution for this record.
Sep 21, 2026 · NIST NVD
Detected
A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer
Oct 14, 2026 · NIST NVD
Updated
A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer
Sources
- CVE.orgCVE-2026-94214
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-94214
30-day exploitation probability 0.5%
first.org - NIST NVDCVE-2026-94214
A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has bee
nvd.nist.gov