Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-105296 EUVD-2026-116707GHSA-58g4-6m6r-79h4

Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unint…

Published Nov 4, 2026 · Updated Nov 4, 2026 · Assigned by jpcert

Description

Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unintended operations may be performed.

Affected products

VendorProductAffectedFixed
Akeeba Akeeba Backup for Joomla! < 10.3.7 10.3.7
Akeeba Akeeba Backup for WordPress < 9.1.8 9.1.8
Akeeba Akeeba Solo < 9.1.8 9.1.8
Akeeba Admin Tools for Joomla! < 7.9.0 7.9.0

References