CVE-2026-94214
A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
- Published Sep 21, 2026
- CVSS 2.1 low
- 0.5% chance of exploitation in the next 30 days (EPSS)