~ / search / CVE-2026-105296

CVE-2026-105296

State: published CNA: jpcert CVSS 4.0 5.1 Medium NVD: deferred

Description

Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unintended operations may be performed.

Affected products

VendorProductVersions
Akeeba Ltd. Akeeba Backup for Joomla! <10.3.7
Akeeba Ltd. Akeeba Backup for WordPress <9.1.8
Akeeba Ltd. Akeeba Solo <9.1.8
Akeeba Ltd. Admin Tools for Joomla! <7.9.0

References

External links from the record. They lead to third-party sites.