Cross-Site Request Forgery Vulnerability in QuickCMS by Open Solution

CVE-2026-1468

What is CVE-2026-1468?

QuickCMS, developed by Open Solution, is susceptible to a Cross-Site Request Forgery vulnerability that compromises user security across multiple endpoints. Attackers can exploit this flaw by creating malicious websites that, when accessed by a victim, automatically send unauthorized POST requests utilizing the victim's privileges. Unfortunately, QuickCMS lacks any protective mechanisms against such attacks, rendering all forms within the software potentially vulnerable. While version 6.8 has been tested and confirmed as vulnerable, it remains uncertain whether other untested versions may also be affected, as the vendor has not provided further details on the vulnerable version range.

References