CVE-2026-39718

Summary

A Cross-Site Request Forgery (CSRF) vulnerability exists in Webriti Wallstreet wallstreet versions from n/a through 2.8.6, allowing attackers to forge requests and perform unauthorized actions on behalf of authenticated users.

Exploitability

Exploitation is relatively straightforward as it requires the victim to be logged in and tricked into performing an action on the attacker's behalf. Precondition is that the victim must be authenticated and on the same domain.

Blast radius

If exploited, this could lead to unauthorized actions being performed on the victim's account, potentially resulting in data loss or financial harm.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Wallstreet version 2.8.7 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.