{"id":"CVE-2026-116052","title":"LinkStackOrg LinkStack cross-site request forgery","summary":"A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. The v…","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:X/RL:X/RC:C","cvssSource":"cna","cwe":["CWE-352","CWE-862"],"vendor":"LinkStackOrg","product":"LinkStack","affected":["LinkStack 4.8.0","LinkStack 4.8.1","LinkStack 4.8.2","LinkStack 4.8.3","LinkStack 4.8.4","LinkStack 4.8.5","LinkStack 4.8.6","LinkStack 4.8.7","LinkStack 4.8.8"],"published":"2026-10-25","updated":"2026-10-25","sourceUpdated":"2026-10-25T12:15:10.995Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116052","references":[{"url":"https://vuldb.com/vuln/426136","label":"VDB-426136 | LinkStackOrg LinkStack cross-site request forgery"},{"url":"https://vuldb.com/vuln/426136/cti","label":"VDB-426136 | CTI Indicators (IOB, IOC)"},{"url":"https://vuldb.com/cve/CVE-2026-116052","label":"CVE-2026-116052 | CVE Analysis and Report"},{"url":"https://vuldb.com/submit/995635","label":"Submit #995635 | LinkStackOrg LinkStack v4.8.6 Cross-Site Request Forgery"}],"tags":["cve.org"],"ingestedAt":"2026-10-25T22:08:29.956Z","epss":0.00211,"epssPercentile":0.11345,"slug":"CVE-2026-116052","body":"## Overview\n\nA security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way.\n\n## Affected\n\n- `LinkStack 4.8.0`\n- `LinkStack 4.8.1`\n- `LinkStack 4.8.2`\n- `LinkStack 4.8.3`\n- `LinkStack 4.8.4`\n- `LinkStack 4.8.5`\n- `LinkStack 4.8.6`\n- `LinkStack 4.8.7`\n- `LinkStack 4.8.8`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":23.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}