PT-2026-38437 · Unknown · Divvydrive

Alperen Keski̇n · Published 2026-05-07 · Updated 2026-05-14 · CVE-2026-6795

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DivvyDrive versions 4.8.2.9 through 4.8.3.1

Description DivvyDrive allows parameter injection, which leads to an open redirect. This occurs when the application redirects users to an untrusted site via a manipulated parameter.

Recommendations Update to version 4.8.3.2.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2026-6795

Affected Products

Divvydrive

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-6795 · Security Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0182 · Note
• https://twitter.com/CVEnew/status/2052400763192983601 · Twitter Post
• https://twitter.com/lyrie_ai/status/2054848363783229697 · Twitter Post
• https://twitter.com/lyrie_ai/status/2054848365435724011 · Twitter Post
• https://twitter.com/lyrie_ai/status/2054848364575924452 · Twitter Post
• https://twitter.com/OrizonCyber/status/2052448411681476855 · Twitter Post
• https://t.me/CVEtracker/52983 · Telegram Post