CVEPublished 2026-07-27Modified 2026-07-280 articles on news4 live referencesNVD data

CVE-2026-53669

Vulnerability data via NVD (ingested)

CVSS v3.1
EPSS percentile
Description

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in <Link> and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0.

Timeline
Published 2026-07-27
Modified 2026-07-28

External references

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

More intel sources (5)

Known PoCs on GitHub

No public proof-of-concept repositories found for CVE-2026-53669 on GitHub.
We haven't classified any articles referencing CVE-2026-53669 yet. The external references above still apply.