CVE-2026-80327

Open Redirect in PingGateway Fragment Filter

State: Published
Severity: 5.1 Medium
Published: Oct 6, 2026
Updated: Oct 6, 2026
Reserved: Aug 26, 2026

Description

An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 (and later).

Scores

CVSS	Score	Vector	Source
4.0	5.1 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/S:P/AU:N/R:U/RE:M/U:Amber	Ping Identity

Weaknesses

CWE-601 URL redirection to untrusted site ('open redirect')

Affected Products

Product	Versions
PingGatewayPing Identity	7.1.0 through 7.2.0Affected 2023.2.0 through 2024.11.1Affected 2025.3.0 through 2025.11.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.