CVE-2026-28172

The vulnerability allows unauthenticated attackers to exploit Cross Site Request Forgery (CSRF) in Tracking Code Manager versions up to 2.6.0, potentially enabling them to perform unauthorized actions on behalf of users. This could lead to data manipulation or unauthorized access to sensitive information. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of exploitation.