CVE-2025-26058

Summary

CVE-2025-26058 is a vulnerability affecting Webkul QloApps version 1.6.1. This issue exposes authentication tokens through URL redirection. When users access protected areas like the admin panel, the application appends sensitive authentication tokens to the URLs, making them susceptible to interception by unauthorized parties. An attacker gaining access to these tokens could potentially take over the affected account or perform unauthorized actions. Users are advised to upgrade to a patched version of the application to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.