https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:52:39 +0000 https://cve.radiocsirt.org/vuln/cve-2026-22194 <p><strong>Affected:</strong> GestSup</p> <p>GestSup versions up to and including 3.2.60 contain a cross-site request forgery (CSRF) vulnerability where the application does not verify the authenticity of client requests. An attacker can induce a logged-in user to submit crafted requests that perform actions with the victim&#39;s privileges. This can be exploited to create privileged accounts by targeting the administrative user creation endpoint.</p> <p><strong>Affected:</strong> GestSup</p> <p>GestSup versions up to and including 3.2.60 contain a cross-site request forgery (CSRF) vulnerability where the application does not verify the authenticity of client requests. An attacker can induce a logged-in user to submit crafted requests that perform actions with the victim&#39;s privileges. This can be exploited to create privileged accounts by targeting the administrative user creation endpoint.</p> https://cve.radiocsirt.org/vuln/cve-2026-22194