CVE-2026-80327: Open Redirect in PingGateway Fragment Filter

Severity: medium (CVSS 5.1 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-06 · updated 2026-10-06
Weakness: CWE-601

Description

An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 (and later).

Affected products

Ping Identity PingGateway: from 7.1.0 through 7.2.0; from 2023.2.0 through 2024.11.1; from 2025.3.0 through 2025.11.1

References

https://docs.pingidentity.com/pinggateway/release-notes/preface.html
https://product-downloads.pingidentity.com/browse/ig/featured
https://support.pingidentity.com/s/article/SECADV202602-Open-Redirect-in-PingGateway-Fragment-Filter

Get alerted when CVE-2026-80327 or the next vulnerability affects your stack