Cross-Site Request Forgery Vulnerability in LinkStackOrg LinkStack
CVE-2026-116052

5.3MEDIUM

Key Information:

Status
Vendor
CVE Published:
25 October 2026

What is CVE-2026-116052?

A vulnerability has been identified in the LinkStackOrg LinkStack up to version 4.8.8, allowing attackers to perform cross-site request forgery (CSRF) attacks. This flaw could potentially enable unauthorized actions to be executed on behalf of an unsuspecting user. Notably, the specific function that is exploitable remains undisclosed. Despite attempts to inform the vendor about this issue, there has been no response. Organizations using affected versions of LinkStack should assess their risk and take appropriate measures to safeguard their applications.

Affected Version(s)

LinkStack 4.8.0

LinkStack 4.8.1

LinkStack 4.8.2

References

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

pure (VulDB User)
VulDB CNA Team
.