Medium severity · published Oct 6, 2026
CVE-2026-80327
Open Redirect in PingGateway Fragment Filter
5.1
CVSS
0.4%
EPSS
No
On KEV
Description
An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 through 2025.11.1. It is fixed in versions 2024.11.2, 2025.11.2, and 2026.3.0 (and later).
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PI
PingGateway · Ping Identity
7.1.0 through 7.2.0; 2023.2.0 through 2024.11.1; 2025.3.0 through 2025.11.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-80327
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-80327
release-notes
https://docs.pingidentity.com/pinggateway/release-notes/preface.html
patch
https://product-downloads.pingidentity.com/browse/ig/featured
vendor-advisory
https://support.pingidentity.com/s/article/SECADV202602-Open-Redirect-in-PingGateway-Fragment-Filter