SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-15080

MEDIUM · CVSS 4.3 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-07-10 · Last synced 2026-08-09

CyberRota Analysis

AI-Generated

A Cross-Site Request Forgery (CSRF) vulnerability in the Ray Enterprise Translation module for Drupal allows attackers to perform unauthorized actions on behalf of authenticated users. This affects versions from 0.0.0 to 4.0.4, 4.1.0 to 4.1.4, and 11.0.0 to 11.0.4, potentially compromising user data and application integrity. Organizations using these affected versions should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2026-15080
Severity
MEDIUM
CVSS
4.3
EPSS
0.12%

Original NVD Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Ray Enterprise Translation allows Cross Site Request Forgery. This issue affects Ray Enterprise Translation versions: from 0.0.0 to 4.0.4, from 4.1.0 to 4.1.4, from 11.0.0 to 11.0.4.