CVE-2026-5702

CVE-2026-5702 · Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint.

CVSS 4.8 · Medium · EPSS 0.2%

Published: 2026-10-29T11:17:09.384Z
Updated: 2026-10-29T13:07:11.657Z

Affected products and versions

sabbatic app
Versions
- versions prior to 7.96.0.1 y 7.96.0.2: Affected
No fix published

Original sources

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sabbatic-application
https://nvd.nist.gov/vuln/detail/CVE-2026-5702

Check your server →

CVE-2026-5702 · Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application

Affected products and versions

sabbatic app

Original sources