CVE-2025-71454 | vtenext up to 25.02.1 VteCsrf.php csrf_check REQUEST cross-site request forgery

November 4, 2026 Yanac

A vulnerability described as problematic has been identified in vtenext up to 25.02.1. Affected by this issue is the function csrf_check of the file include/utils/VteCsrf.php. Executing a manipulation of the argument Request can lead to cross-site request forgery.

This vulnerability is tracked as CVE-2025-71454. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More