Cwe-352 - Cross-Site Request Forgery (csrf) - Cwe

Related Threat Clusters

• Cisco IOS Vulnerability CVE-2008-4128 Under Active Exploitation

  CISA has warned of ongoing attacks exploiting the CVE-2008-4128 vulnerability in Cisco IOS 12.4, a cross-site request forgery flaw. This vulnerability, which has been known since 2008, allows attackers to execute…

  5 articles · Updated July 14, 2026
• Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure

  A joint advisory from 21 global cybersecurity agencies warns that Russian state hackers from the FSB's Center 16 are exploiting poorly configured routers to infiltrate critical infrastructure networks worldwide. The…

  72 articles · Updated July 13, 2026
• Critical Authlib Vulnerabilities Discovered in Ubuntu Affecting JWT and CSRF

  Multiple vulnerabilities were identified in the Authlib library used in Ubuntu systems, specifically affecting versions 24.04 LTS and 26.04 LTS. Discovered by researchers Jay Neiva, Mauro Carrillo, and Johnny Deuss,…

  2 articles · Updated July 16, 2026
• Critical XSS Vulnerability in Pretalx Conference Platform Exposed

  A critical stored XSS vulnerability, CVE-2026-41241, has been discovered in the Pretalx conference management platform. This flaw allows registered users to execute malicious scripts that can compromise organizer…

  6 articles · Updated May 28, 2026
• Critical Vulnerabilities Discovered in Jenkins Plugins

  Two significant vulnerabilities have been identified in Jenkins plugins, CVE-2026-48922 and CVE-2026-48925. The Jenkins Credentials Binding Plugin allows attackers to write files to arbitrary locations, potentially…

  2 articles · Updated May 28, 2026
• Critical phpBB Vulnerability Allows Account Hijacking via Single Request

  A critical vulnerability in phpBB forum software enables attackers to hijack any account, including administrators, with a single unauthenticated request. This flaw, tracked as PTT-2026-004, affects all versions up to…

  6 articles · Updated June 10, 2026
• SAP Addresses Critical Vulnerabilities in Commerce Cloud and S/4HANA

  On May 12, 2026, SAP released security updates for 15 vulnerabilities, including two critical flaws in Commerce Cloud and S/4HANA. The first critical vulnerability (CVE-2026-34263) allows unauthenticated attackers to…

  6 articles · Updated May 12, 2026
• Silent Ransom Group Targets Law Firms with Fast Flux Infrastructure

  The Silent Ransom Group (SRG), a cyber extortion group active since 2022, has been identified using DNS Fast Flux infrastructure to target U.S. law firms and other sensitive industries. Unlike traditional ransomware,…

  2 articles · Updated June 7, 2026
• HestiaCP Vulnerability Allows Admin Takeover via Cron Job Exploit

  A high-severity vulnerability in HestiaCP, tracked as CVE-2026-12196, allows low-privileged users to take over administrator accounts through a broken access control in the panel's cron job feature. This flaw enables…

  2 articles · Updated July 5, 2026
• AI Browsers Face Serious Security Risks from Prompt Injection Attacks

  Recent investigations into AI browsers like Perplexity Comet and ChatGPT Atlas reveal significant security vulnerabilities, particularly prompt injection attacks. These attacks allow malicious actors to embed harmful…

  2 articles · Updated July 9, 2026

Recent Intelligence Reports

• CVE-2008-4128 — nvd.nist.gov · July 17, 2026
• USN-8557-1: Authlib vulnerabilities — Ubuntu · July 16, 2026
• CISA Known Exploited Vulnerabilities — nvd.nist.gov · July 15, 2026
• CISA Warns of Decades — Cybersecuritynews · July 14, 2026
• Old Cisco vulnerability under attack: Protection guide — Heise.De · July 14, 2026
• US authorities warn that state — Cybersecuritydive · July 13, 2026
• Ai Browsers Prompt Injection — www.theregister.com · July 12, 2026
• Layerx Identifies Vulnerability In New Chatgpt Atlas Browser — layerxsecurity.com · July 10, 2026

Related Entities