Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Dovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF). The affected endpoint processes state-changing requests without requiring a CSRF token or equivalent protection. The endpoint accepts application/x-www-form-urlencoded requests, and an originally POST-based request can be converted to a GET request while still successfully updating user details. This allows an attacker to craft a malicious request that, when visited by an authenticated user, can modify user account information without their consent.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-31014 Dovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF). The affected endpoint processes state-changing requests without requi… https://www.cve.org/CVERecord?id=CVE-2026-31014
Post summary
Disclosed CVE‑2026‑31014 highlighting a CSRF flaw in Dovestones Software’s AD Self Update <4.0.0.5, where state‑changing requests are processed without authentication.
🚨*CVE* CVE-2026-31014 Dovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF). The affected endpoint processes state-changing requests without requi… https://www.cve.org/CVERecord?id=CVE-2026-31014 ----- Traducción: CVE-2026-31014 Dov… http://infoflow.cloud`
Post summary
The post announces the CVE‑2026‑31014 CSRF vulnerability in Dovestones Softwares AD Self Update, providing a brief technical description but no PoC, exploit, or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | dovestones | ad_self_update | - | - | - |