CVE-2026-126323

The Vvveb platform, through version 1.0.8.6 , is vulnerable to a cross-site request forgery (CSRF) vulnerability. The root cause is that the checkCsrf() function in admin/controller/base.php only validates tokens for POST requests, failing to secure GET requests. An attacker could lure a logged-i...