CVE-2026-55742 - Cotonti CSRF in admin.rights.php allows privilege escalation
CVE ID :CVE-2026-55742 Published : June 18, 2026, 6:05 a.m. | 3 hours, 3 minutes ago Description :Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the administration rights handler. In system/admin/admin.rights.php, the rights update action...