CVE-2026-1169CWE-352CWE-862

birkir prime cross-site request forgery

Medium · published January 19, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

A security vulnerability has been detected in birkir prime up to 0.4.0.beta.0. This vulnerability affects unknown code. Such manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00240 · 14.3th percentile
Weaknesses
CWE-352 · Cross-Site Request Forgery (CSRF); CWE-862 · Missing Authorization
Published
2026-01-19T17:32Z
EPSS history
Timeline
  • 19 JAN 17:32Z
    birkir prime cross-site request forgery
    cvelistv5