Pending AI Enrichment

This vulnerability was recently detected via the live feed and has not yet been processed by Precogs AI's context enrichment engine. The data below represents raw telemetric data.

RAW NVD TELEMETRY

CVE-2026-105118

CVSS Base Score
4.7 MEDIUM
Primary Weakness
CWE-347
Published Date
Oct 3, 2026
Data Source
NVD API

OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by supplying an unverified id_token_hint to the /oauth2/connect/endSession endpoint. Attackers can name any realm client in a forged hint to redirect victims to any registered post-logout URI, enabling phishing that borrows the OpenAM host's trust.

Related Vulnerabilitiesvia CWE-347

CVE-2026-44788.1 HIGH

A vulnerability was identified in Yi Technology YI Home Camera 2 2.

CWE-345CWE-347
CVE-2026-322944.7 MEDIUM

JetKVM prior to 0.

CWE-345CWE-347
CVE-2026-35649 CRITICAL

A condition in ScreenConnect may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios.

CWE-347
CVE-2026-42587.5 HIGH

All versions of the package sjcl are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve validation in sjcl.

CWE-347CWE-325
CVE-2026-279629.1 CRITICAL

Authlib is a Python library which builds OAuth and OpenID Connect servers.

CWE-347
CVE-2026-35620 UNKNOWN

Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability.

CWE-347

Is your system affected?

Precogs AI detects CVE-2026-105118 in compiled binaries, LLMs, and application layers — even without source code access.

Request Deep AnalysisBook a demo