CVE-2026-51954 – An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitr

An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirect_uri.