critical
advisory
Webriti Leo: Cross-Site Request Forgery (CVE-2026-125848)
The webriti Leo product (n/a through 1.7.4) is affected by a Cross-Site Request Forgery (CSRF) vulnerability, resulting in a CVSS v3.1 base score of 8.8.
CVE search metadata
CVE search record: CVE-2026-125848. Severity: high. CVSS: 8.8. KEV: no. Product: Leo. Brief: Webriti Leo: Cross-Site Request Forgery (CVE-2026-125848). Brief link: https://feed.craftedsignal.io/briefs/2026-11-leo-csrf-cve-2026-125848/
Triage facts
Revision 1- Applicability
- Leo
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 1 public source
- Freshness
- Revision 1Nov 11, 16:15 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A Cross-Site Request Forgery (CSRF) vulnerability exists in the webriti Leo product. This issue affects Leo versions from n/a through 1.7.4.
Impact
The vulnerability is associated with a CVSS v3.1 base score of 8.8.