CVE-2026-94214

MEDIUMCVSS 4.3

Description

A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

Timeline

Published:September 21st, 2026 1:17 PM

Last modified:October 14th, 2026 4:17 PM

CVSS Scoring

CVSS v3: 4.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CVSS v2: 5.0

Weaknesses (CWE)

CWE-601

References & Reports

Advisories, patches, and third-party reports

https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/IDIRECT-WEBSERVER-HOST-REDIRECT-002-vulndb.md
https://vuldb.com/cve/CVE-2026-94214
https://vuldb.com/submit/894245
https://vuldb.com/vuln/408070
https://vuldb.com/vuln/408070/cti

Source: NIST NVD · Data may lag official sources by up to one minute