Is CVE-2026-82468 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-82468?

CVE-2026-82468 has a CVSS v3 severity of MEDIUM (4.7).

Back

CVE-2026-82468

Description

Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation and force victims to authenticate to attacker-controlled accounts.