CVE-2026-67176
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Nov 10, 2026
Vendor
unknown
Description
Chargemap contains an open redirect vulnerability in the authentication login endpoint. A remote, unauthenticated attacker could send a crafted URL to a victim and redirect them to an attacker controlled domain. Fixed 2026-07-17.