Skip to content

CVE-2026-116748

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
October 27, 2026
Last Seen
October 27, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A permissive CORS vulnerability (CVE-2026-116748) was discovered in Transmission versions 4.0.0 to 4.1.2, allowing malicious websites to access the X-Transmission-Session-Id anti-CSRF token. This vulnerability enables attackers to issue RPC commands without user authentication, potentially altering...

Public Exploits

Checking GitHub for proof-of-concept code…