CVE-2026-55590— CakePHP: Open redirect weakness via backslash bypass
Possible ATT&CK Techniques 1AI
T1189 · Drive-by CompromiseAffected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| cakephp | authentication | < 2.11.1 | affected |
>= 3.0.0, < 3.3.6 | affected | ||
>= 4.0.0, < 4.1.1 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-55590
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CakePHP: Open redirect weakness via backslash bypass
Source: CVE Program / CVE List V5
Vulnerability Description
CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. Prior to 2.11.1, 3.3.6, and 4.1.1, the getLoginRedirect() method contains a weakness to backslash bypasses that allows redirect targets with attacker-controlled hostnames through the redirect query string parameter. This issue is fixed in versions 2.11.1, 3.3.6, and 4.1.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Source: CVE Program / CVE List V5
Vulnerability Title
CakePHP Authentication 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CakePHP CakePHP Authentication是CakePHP组织的一个身份认证系统。 CakePHP Authentication存在输入验证错误漏洞，该漏洞源于getLoginRedirect()方法中存在反斜杠绕过缺陷，允许攻击者通过redirect查询字符串参数控制重定向目标主机名。以下版本受到影响：2.11.1之前版本、3.3.6之前版本和4.1.1之前版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| cakephp | authentication | < 2.11.1 | - |
II. Public POCs for CVE-2026-55590
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-55590
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-55590 (8)
- 🔗 Release Authentication 3.3.6 · cakephp/authentication · GitHubx_refsource_MISC
- 🔗 Release Authentication 4.1.1 · cakephp/authentication · GitHubx_refsource_MISC
Vendor Advisories for CVE-2026-55590 (1)
Vendor Pages for CVE-2026-55590 (1)
IV. Related Vulnerabilities
Same weakness: CWE-601
- CVE-2026-14219
URL Redirection in Bilin Software's HUMANIST Digital Human R - CVE-2026-18721
kalcaddle kodbox SSO API Login apiLogin redirect - CVE-2026-69087
Grav Form Plugin before 9.1.13 Open Redirect via form.value( - CVE-2025-71403
better-auth before 1.1.20 Open Redirect via trustedOrigins B - CVE-2026-53573
core-geonetwork has an Open Redirect Bypass
V. Comments for CVE-2026-55590
No comments yet