CVE-2026-82468 in Rodauth
Summary
by MITRE • 08/29/2026
Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation and force victims to authenticate to attacker-controlled accounts.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.