CVE-2026-15080

Published: Jul 10, 2026Modified: Aug 7, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Ray Enterprise Translation allows Cross Site Request Forgery. This issue affects Ray Enterprise Translation versions: from 0.0.0 to 4.0.4, from 4.1.0 to 4.1.4, from 11.0.0 to 11.0.4.

Affected (5)

Products: Lingotek: Ray Enterprise Translation

Lingotek

1 product

Ray Enterprise Translation

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Lingotek Ray Enterprise Translation	From 1.0 to 4.0.4
Lingotek Ray Enterprise Translation	From 11.0.0 to 11.0.4
Lingotek Ray Enterprise Translation	From 4.1.0 to 4.1.4
Lingotek Ray Enterprise Translation	From 6.x-1.0 to 6.x-1.40
Lingotek Ray Enterprise Translation	From 7.x-1.0 to 7.x-7.47

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (1)

https://www.drupal.org/sa-contrib-2026-071

Source: mlhess@drupal.org

Vendor Advisory

Timeline

No history available yet.