CVE-2026-11477Disclosure

LOWCVSS 2.1 · LOW

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was detected in hs-web hsweb-framework up to 5.0.1. This affects the function OAuth2Client of the file hsweb-authorization/hsweb-authorization-oauth2/src/main/java/org/hswebframework/web/oauth2/server/OAuth2Client.java of the component OAuth2 Client. The manipulation results in open redirect. The attack can be executed remotely. The exploit is now public and may be used. The patch is identified as c2882679a9125cea52678151af5ae213cbd52579. Applying a patch is advised to resolve this issue.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-601

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
General: 1 classified signal
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets4 URLs

By indicator

Full discourse3 posts

Infoflowcloud@infoflowcloud136d
General
🚨*CVE* CVE-2026-11477 A vulnerability was detected in hs-web hsweb-framework up to 5.0.1. This affects the function OAuth2Client of the file hsweb-authorization/hsweb-authorization-oauth2/… https://www.cve.org/CVERecord?id=CVE-2026-11477 ----- Traducción: CVE-2026-11477 Se … http://infoflow.cloud`
Post summary
The tweet states that CVE-2026-11477 affects hs-web hsweb-framework up to 5.0.1, mentions the OAuth2Client function, and provides a link to the CVE record, but offers no detailed technical or exploitation information.
0000027
79 followersView on X
CVE@CVEnew136d
Disclosure
CVE-2026-11477 A vulnerability was detected in hs-web hsweb-framework up to 5.0.1. This affects the function OAuth2Client of the file hsweb-authorization/hsweb-authorization-oauth2/… https://www.cve.org/CVERecord?id=CVE-2026-11477
Post summary
The text announces that CVE‑2026‑11477 has been detected in the hs‑web hsweb‑framework up to version 5.0.1, specifically impacting the OAuth2Client function.
00000262
57.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds136d
Disclosure
CVE-2026-11477 Open Redirect Vulnerability in hs-web hsweb-framework OAuth2 Clie... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11477 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The tweet announces CVE‑2026‑11477 as an Open Redirect vulnerability in the hs‑web hsweb‑framework OAuth2 client, but provides no PoC, exploit, patch, or evidence of active exploitation.
0000055
4.0K followersView on X

Explore more

Back to dashboard