πŸ” CVE Alert

CVE-2026-5791

CRITICAL 9.6

CSRF in DivvyDrive Information Technologies' DivvyDrive

CVSS Score
9.6
EPSS Score
0.0%
EPSS Percentile
0th

Cross-Site request forgery (CSRF) vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Cross Site Request Forgery. This issue affects DivvyDrive: from 4.8.2.9 before 4.8.3.2.

CWE CWE-352
Vendor divvydrive information technologies inc.
Product divvydrive
Published May 7, 2026
Last Updated May 7, 2026
Stay Ahead of the Next One

Get instant alerts for divvydrive information technologies inc. divvydrive

Be the first to know when new critical vulnerabilities affecting divvydrive information technologies inc. divvydrive are published β€” delivered to Slack, Telegram or Discord.

Get Free Alerts β†’ Free Β· No credit card Β· 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

DivvyDrive Information Technologies Inc. / DivvyDrive
4.8.2.9 < 4.8.3.2

References

NVD β†— CVE.org β†— EPSS Data β†—
siberguvenlik.gov.tr: https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0182

Credits

Γ‡ağatay CEYHAN