Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that accepts unvalidated RelayState POST parameters as redirect destinations. Attackers with IdP access can supply malicious RelayState values to redirect authenticated users to attacker-controlled URLs for credential theft or phishing attacks.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-80200 Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that accepts unvalidated RelayState POST parameters as redirect… https://www.cve.org/CVERecord?id=CVE-2026-80200
Post summary
The post announces an open redirect flaw in Kimai (versions <2.53.0) involving unvalidated RelayState POST parameters; no exploit, patch, or active use is reported.
🚨*CVE* CVE-2026-80200 Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that accepts unvalidated RelayState POST parameters as redirect… https://www.cve.org/CVERecord?id=CVE-2026-80200 ----- Traducción: CVE-2026-80200 Kim… https://infoflow.cloud`
Post summary
The tweet announces a new CVE-2026-80200 vulnerability in Kimai, highlighting an open redirect in the SAML auth handler that accepts unvalidated RelayState POST parameters; no PoC, exploit tool, or patch is mentioned.