CVE-2026-105296

CVSS 5.4 (medium) · published 2026-11-04

Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unintended operations may be performed.

Weakness: CWE-352

Source: NVD CVE-2026-105296

References

• https://jvn.jp/en/jp/JVN44272550/
• https://www.akeeba.com/download/akeeba-backup/10-3-7.html
• https://www.akeeba.com/news/1789-security-hardening-in-todays-akeeba-backup-solo-and-admin-tools-releases.html

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.