CVE-2026-86066 | Horilla up to 1.x Attendance Approval approve-validate-attendance-request approve_validate_attendance_request cross-site request forgery (EUVD-2026-87371)

September 26, 2026 Yanac

A vulnerability marked as problematic has been reported in Horilla up to 1.x. This issue affects the function approve_validate_attendance_request of the file /attendance/approve-validate-attendance-request of the component Attendance Approval. This manipulation causes cross-site request forgery.

This vulnerability is handled as CVE-2026-86066. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More