MEDIUM 5.1 NVD
CVE-2026-105296
Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unintended operations may
Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unintended operations may be performed.
References
- https://jvn.jp/en/jp/JVN44272550/
- https://www.akeeba.com/download/akeeba-backup/10-3-7.html
- https://www.akeeba.com/news/1789-security-hardening-in-todays-akeeba-backup-solo-and-admin
This medium severity vulnerability with a CVSS score of 5.1 was published on 2026-11-04 via NVD.
vulnfeed aggregates 18348 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.