nosduco vulnerabilities

Products

• nforwardauth 1

Latest nosduco CVEs

Newest publication first

1. CVE-2026-81509 nforwardauth: Unvalidated r parameter allows post-authentication open redirect

   Published 2026-10-26

   Medium·CVSS 6.1 EPSS 0.32%

   nforwardauth is a forward auth service that allows the use of a single authentication middleware for multiple sites. Versions prior to 1.5.1 accept an unvalidated r query parameter on the /login endpoint and use them as the post-authentication redirect destination. An unauthentic...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.