CVE-2026-73671 describes an open redirect vulnerability in Saurus CMS Community Edition's logout handling code located in classes/port.inc.php. The url parameter, supplied via GET or POST, is passed directly to the HTTP Location header without domain allowlisting, scheme validation, or relative path enforcement. This unauthenticated flaw enables attackers to craft logout URLs that redirect users to attacker-controlled external domains or javascript: URIs after session destruction, potentially leading to credential theft and OAuth redirect abuse. The vulnerability is rated medium severity with a CVSS 4.0 score of 5.1. No vendor advisory or patch information is currently available.

The vulnerability allows unauthenticated attackers to redirect users to arbitrary external sites after logout, which can be exploited for phishing attacks and credential theft. It also enables abuse of OAuth redirect mechanisms. However, there is no indication of direct code execution or data compromise within the CMS itself. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should be cautious about logout URLs and consider implementing custom validation or filtering of redirect parameters if possible.