CVE-2026-54588 - Critical OIDC/SAML redirect_uri poisoning in Poweradmin. Unauthenticated attacker can steal auth codes via HTTP_HOST header injection. CVSS 9.6. No patch available. Disable OIDC/SAML until fixed. #CVE #infosec #Poweradmin

https://www.valtersit.com/cve/CVE-2026-54588/