CVE-2026-4590

CVE-2026-4590 affects kalcaddle kodbox 1.64. The vulnerable element is the loginSubmit API component, specifically an unknown function in /workspace/source-code/plugins/oauth/controller/bind/index.class.php. Manipulating the argument third enables cross-site request forgery (CSRF). The issue is e...