CVE-2026-1339

CVSS 5.4 (medium) · published 2026-11-05

An Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subsequently follows that link. Affected systems: This issue affects only the classic deployment options for UCMDB UI (ucmdb-browser) component within Universal Discovery and CMDB and Operations Bridge Manager. Containerized deployment options are not affected.

Weakness: CWE-601

Source: NVD CVE-2026-1339

References

• https://my.opentext.com/support/article/open-redirect-vulnerability-reported-by-orange-obm/2292100
• https://my.opentext.com/support/article/open-redirect-vulnerability-ucmdb/2266764

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.