Is CVE-2026-3049 actively exploited?

A proof-of-concept exploit is publicly available for CVE-2026-3049, but active exploitation has not been confirmed.

Can CVE-2026-3049 be exploited remotely?

Yes. CVE-2026-3049 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-3049?

CVE-2026-3049 has a CVSS score of 6.1 (MEDIUM) and an EPSS exploitation probability of 0.03%.

HOME VULNERABILITIESCVE-2026-3049

MEDIUMPOC

CVE-2026-3049

CWE-601Published: February 24, 2026· Updated: Feb 25, 2026

6.1

CVSS v3.1

EPSS:0.03%probability of exploitation in 30 daysPercentile:9.5th

Official Description

A vulnerability was detected in horilla-opensource horilla up to 1.0.2. This issue affects the function get of the file horilla_generics/global_search.py of the component Query Parameter Handler. The manipulation of the argument prev_url results in open redirect. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 1.0.3 is capable of addressing this issue. The patch is identified as 730b5a44ff060916780c44a4bdbc8ced70a2cd27. The affected component should be upgraded.

NVD Source

Technical Analysis

CVE-2026-3049 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.

A proof-of-concept (PoC) exploit exists for CVE-2026-3049. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.