CVE-2026-31982
High
Description
An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of a user-controlled redirection parameter. An unauthenticated attacker can craft a request to the SAML sign-in endpoint and poison the cached SAML redirection for other users who subsequently initiate SAML Single Sign-On, enabling phishing and credential-theft attacks, as well as disrupting SAML authentication for all affected users.
SeverityHigh
CVSS7.1
Exploit probability—
ProductNozominetworks Cmc
PublishedJul 9, 2026
First seenJul 9, 2026
Weakness typeCWE-601Open redirect
How to fix
Update
- nozominetworks cmc26.2.0 or later
- nozominetworks guardian26.2.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nozominetworks cmc | v < 26.2.0 | 26.2.0 |
| nozominetworks guardian | v < 26.2.0 | 26.2.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.