CVE-2026-105296

Publié : 4 novembre 2026

Modifié : 4 novembre 2026

Score CVSS

5.4

MEDIUM

Description détaillée

Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unintended operations may be performed.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Références et Patchs

https://jvn.jp/en/jp/JVN44272550/https://www.akeeba.com/download/akeeba-backup/10-3-7.html https://www.akeeba.com/news/1789-security-hardening-in-todays-akeeba-backup-solo-and-admin-tools-releases.html

Dernières Vulnérabilités

CVE-2026-80335

In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code execution with no additional execution privileges needed.

VOIR DÉTAILS

CVE-2026-79405

In Modem Firmware, there is a possible system crash due to improper input validation of dedicated PUCCH configuration. This could lead to remote denial of service with no additional execution privileges needed.

VOIR DÉTAILS

CVE-2026-121803

Rejected reason: This CVE ID is a duplicate of CVE-2026-80335 (VULN-002 dl_download_midst) and has been rejected.

VOIR DÉTAILS