Skip to content
OpenAdvisories

Vendor

warp-tech

14 known vulnerabilities.

Products

warpgate 13 russh 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-58491

    Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter

    Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.5, the /@warpgate/api/sso/providers/:name/start endpoint stores an attacker-controlled next parameter that the POST /@warpgate/api/sso/return handler inserts without HTML es…

    warp-tech warpgate