CVE-2026-78377: CWE-601 URL redirection to untrusted site ('open redirect') in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program
CVE-2026-78377 is an open redirect vulnerability in the Library Information and Document Automation Program by Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. This vulnerability affects version 22.1 and allows attackers to redirect users to untrusted sites, facilitating phishing attacks. The issue is classified under CWE-601 and has a CVSS 3.1 base score of 6.1, indicating a medium severity level.
AI Analysis
Technical Summary
The vulnerability CVE-2026-78377 involves an open redirect flaw in the Library Information and Document Automation Program version 22.1. This flaw allows an attacker to craft URLs that redirect users to untrusted external sites, potentially enabling phishing attacks by misleading users about the destination of links. The vulnerability does not require privileges and involves user interaction (UI:R). It impacts confidentiality and integrity but not availability, with a CVSS vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
Potential Impact
Successful exploitation of this vulnerability can lead to users being redirected to malicious websites, increasing the risk of phishing attacks. The confidentiality and integrity of user data may be partially compromised due to potential phishing, but there is no direct impact on system availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround has been provided at this time. Users and administrators should monitor vendor communications for updates and exercise caution with URLs in the affected version 22.1.
CVE-2026-78377: CWE-601 URL redirection to untrusted site ('open redirect') in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program
Description
CVE-2026-78377 is an open redirect vulnerability in the Library Information and Document Automation Program by Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. This vulnerability affects version 22.1 and allows attackers to redirect users to untrusted sites, facilitating phishing attacks. The issue is classified under CWE-601 and has a CVSS 3.1 base score of 6.1, indicating a medium severity level.
CVSS v3.1
Score 6.1medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability CVE-2026-78377 involves an open redirect flaw in the Library Information and Document Automation Program version 22.1. This flaw allows an attacker to craft URLs that redirect users to untrusted external sites, potentially enabling phishing attacks by misleading users about the destination of links. The vulnerability does not require privileges and involves user interaction (UI:R). It impacts confidentiality and integrity but not availability, with a CVSS vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
Potential Impact
Successful exploitation of this vulnerability can lead to users being redirected to malicious websites, increasing the risk of phishing attacks. The confidentiality and integrity of user data may be partially compromised due to potential phishing, but there is no direct impact on system availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround has been provided at this time. Users and administrators should monitor vendor communications for updates and exercise caution with URLs in the affected version 22.1.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- TR-CERT
- Date Reserved
- 2026-08-24T13:15:34.266Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6aa128ebacd9273b49198e1f
Added to database: 09/09/2026, 09:37:47 UTC
Last enriched: 09/09/2026, 09:52:35 UTC
Last updated: 09/09/2026, 09:52:35 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.