CVE-2026-15080

The Lingotek Ray Enterprise Translation module for Drupal is vulnerable to Cross-Site Request Forgery (CSRF) . The module fails to protect several state-changing administrative routes, allowing an attacker to trick a privileged user into performing unauthorized actions, such as uploading or downl...