Cross-Site Request Forgery Vulnerability in Flask-MonitoringDashboard by Flask-Dashboard
CVE-2026-15034

5.3MEDIUM

Key Information:

Vendor

Flask-dashboard

Status
Flask-monitoringdashboard
Vendor
CVE Published:
8 July 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-15034?

A vulnerability identified in Flask-MonitoringDashboard, up to version 5.0.2, facilitates cross-site request forgery attacks. This issue allows attackers to exploit certain functions without proper authorization, potentially leading to unauthorized actions performed on behalf of legitimate users. The exploit can be executed remotely, heightening the risk for users. Although the project team was notified of this vulnerability through an issue report, they have yet to respond or mitigate the risk.

Affected Version(s)

Flask-MonitoringDashboard 5.0.0

Flask-MonitoringDashboard 5.0.1

Flask-MonitoringDashboard 5.0.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-15034 - Proof of Concept

References

https://vuldb.com/vuln/376785
vdb-entry
https://vuldb.com/vuln/376785/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-15034
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

flashzyc (VulDB User)
VulDB CNA Team
.