CVE-2026-53669 | CyberRota

CyberRota Analysis

AI-Generated

Versions 6.0.0 through 7.17.0 of React Router are vulnerable to an Open Redirect issue due to improper handling of backslashes in the `<Link>` component and `useNavigate` function. This vulnerability could allow attackers to redirect users to malicious sites, potentially compromising user data and trust. Developers using affected versions should prioritize upgrading to version 7.18.0 to mitigate this risk.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

github.com ↗ github.com ↗ github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE

CVE-2026-53669

Severity

MEDIUM

CVSS

6.1

EPSS

0.23%

Original NVD Description

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in <Link> and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-55685 HIGH CVE-2026-53668 MEDIUM CVE-2026-53667 MEDIUM CVE-2026-53666 MEDIUM CVE-2026-42342 HIGH CVE-2026-42211 HIGH