CVE-2026-19786

Katalog CVE

CVSS 4.3 · Medium EPSS 0,24%

Kerentanan Cross-Site Request Forgery (CSRF). Skor CVSS 3.1 4.3 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was found in francoisjacquet RosarioSIS up to 12.8. This issue affects some unknown processing of the file Modules.php. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. Upgrading to version 12.9 is capable of addressing this issue. The patch is named 801a71272c82cf4bf695fdc5ed42a9b7511d124d. It is recommended to upgrade the affected component.

Rincian

Terbit di NVD

14 Agustus 2026

Terakhir diubah

14 Agustus 2026

Status NVD

Deferred

CVSS 3.1

4.3 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-352: Cross-Site Request Forgery (CSRF)
CWE-862: Missing Authorization

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 14,0% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/francoisjacquet/RosarioSIS/commit/801a71272c82cf4bf695fdc5ed42a9b7511d124d
• https://github.com/francoisjacquet/rosariosis/
• https://github.com/francoisjacquet/rosariosis/issues/302
• https://github.com/francoisjacquet/rosariosis/releases/tag/v12.9
• https://vuldb.com/cve/CVE-2026-19786
• https://vuldb.com/submit/869378
• https://vuldb.com/vuln/389746
• https://vuldb.com/vuln/389746/cti