CVE-2026-46620

creationtimestamp| type| source ---|---|--- 2026-09-01 20:00:08+00:00| seen| https://t.me/hackingAttack/186124 2026-09-01 20:00:08+00:00| seen| https://t.me/hackingAttack/186122 2026-09-02 01:00:20+00:00| published-proof-of-concept| https://t.me/hackingAttack/186124 2026-09-02 01:00:20+00:00|...

CVE-2026-46620

e107 is a content management system CMS. Prior to 2.3.5, e107 CMS does not properly enforce CSRF token validation on comment moderation actions. The problem comes down to how sessionhandler::check handles CSRF tokens. Instead of requiring a token on every state-changing request, it only validates...

CVE-2026-46620

e107 is a content management system CMS. Prior to 2.3.5, e107 CMS does not properly enforce CSRF token validation on comment moderation actions. The problem comes down to how sessionhandler::check handles CSRF tokens. Instead of requiring a token on every state-changing request, it only validates...