Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, Directus is vulnerable to an open redirect via the redirect query parameter on the /admin/tfa-setup page. When an administrator who has not yet configured Two-Factor Authentication (2FA) visits a crafted URL, they are presented with the legitimate Directus 2FA setup page. After completing the setup process, the application redirects the user to the attacker-controlled URL specified in the redirect parameter without any validation. This vulnerability could be used in phishing attacks targeting Directus administrators, as the initial interaction occurs on a trusted domain. This vulnerability is fixed in 11.16.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-35411 Open Redirect Vulnerability in Directus Prior to Version 11.16.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35411
Post summary
The post announces the open redirect flaw in Directus versions before 11.16.1, providing the CVE identifier and linking to a detailed vulnerability page.
CVE-2026-35411 Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, Directus is vulnerable to an open redirect via the redirect query p… https://www.cve.org/CVERecord?id=CVE-2026-35411
Post summary
The post announces CVE-2026-35411 as an open redirect vulnerability in Directus versions before 11.16.1, without providing a PoC, exploit, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | monospace | directus | - | node.js | - |