CVE-2026-28761CWE-352

Cross-site request forgery vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier

High · published May 15, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

Cross-site request forgery vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier. If a user views a malicious page while logged-in to the affected product, unexpected operations may be done.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00194 · 8.6th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2026-05-15T05:38Z
EPSS history
Timeline
  • 15 MAY 05:38Z
    Cross-site request forgery vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier
    cvelistv5