CVE-2026-82544 | wger-project wger up to 2.6.0-alpha2 Password Reset wger/gym/views/gym.py reset_user_password cross-site request forgery (Issue 2380)

August 29, 2026 Yanac

A vulnerability was found in wger-project wger up to 2.6.0-alpha2. It has been declared as problematic. This issue affects the function reset_user_password of the file wger/gym/views/gym.py of the component Password Reset. Executing a manipulation can lead to cross-site request forgery.

This vulnerability is registered as CVE-2026-82544. It is possible to launch the attack remotely. No exploit is available.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More