{"id":"CVE-2026-105296","published":"2026-11-04T05:18:21.367","lastModified":"2026-11-04T05:18:21.367","description":"Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unintended operations may be performed.","cvssScore":5.4,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cwes":["CWE-352"],"vendors":[],"products":[],"references":[{"url":"https://jvn.jp/en/jp/JVN44272550/","tags":[]},{"url":"https://www.akeeba.com/download/akeeba-backup/10-3-7.html","tags":[]},{"url":"https://www.akeeba.com/news/1789-security-hardening-in-todays-akeeba-backup-solo-and-admin-tools-releases.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}