CVE-2026-96629 | Vrana AdminNeo CSRF Token functions.inc.php get_token/verify_token cross-site request forgery

October 31, 2026 Yanac

A vulnerability identified as problematic has been detected in Vrana AdminNeo. This affects the function get_token/verify_token of the file admin/include/functions.inc.php of the component CSRF Token. Performing a manipulation of the argument token results in cross-site request forgery.

This vulnerability is cataloged as CVE-2026-96629. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More