๐Ÿ” CVE Alert

CVE-2026-105296

MEDIUM 5.4
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th

Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, unintended operations may be performed.

Vendor akeeba ltd.
Product akeeba backup for joomla!
Published Nov 4, 2026
Stay Ahead of the Next One

Get instant alerts for akeeba ltd. akeeba backup for joomla!

Be the first to know when new medium vulnerabilities affecting akeeba ltd. akeeba backup for joomla! are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected Versions

Akeeba Ltd. / Akeeba Backup for Joomla!
0 < 10.3.7
Akeeba Ltd. / Akeeba Backup for WordPress
0 < 9.1.8
Akeeba Ltd. / Akeeba Solo
0 < 9.1.8
Akeeba Ltd. / Admin Tools for Joomla!
0 < 7.9.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
akeeba.com: https://www.akeeba.com/download/akeeba-backup/10-3-7.html akeeba.com: https://www.akeeba.com/news/1789-security-hardening-in-todays-akeeba-backup-solo-and-admin-tools-releases.html jvn.jp: https://jvn.jp/en/jp/JVN44272550/