CVE-2026-78295

Summary

The flaw is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability in Xagio SEO versions 7.1.0.43 and earlier, allowing attackers to perform unauthorized actions on behalf of authenticated users without their consent.

Exploitability

Exploitation is relatively straightforward as it requires the attacker to trick an authenticated user into performing actions on the affected Xagio SEO instance without their knowledge.

Blast radius

If exploited, this vulnerability could result in unauthorized changes to the website's content or configuration, potentially leading to data loss or compromise of user information.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Xagio SEO version 7.1.0.44 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.