CVE-2026-55742

CRITICAL 9.6

Cotonti CSRF in admin.rights.php allows privilege escalation

CVSS Score

9.6

EPSS Score

0.0%

EPSS Percentile

0th

Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the administration rights handler. In system/admin/admin.rights.php, the rights update action ('a=update') modifies group access rights (including via cot_auth_add_group) without calling cot_check_xg to validate the anti-CSRF token.

CWE	CWE-352
Vendor	cotonti
Product	cotonti
Published	Jun 18, 2026
Last Updated	Aug 10, 2026

Stay Ahead of the Next One

Get instant alerts for cotonti cotonti

Be the first to know when new critical vulnerabilities affecting cotonti cotonti are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

Cotonti / Cotonti

1.0.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/Cotonti/Cotonti/blob/f43f1fc38ba4e02027786dad9dac1435c7c52b30/system/admin/admin.rights.php#L53 github.com: https://github.com/Cotonti/Cotonti

Credits

Saidakbarxon Maxsudxonov (sermikro), Innova Networks