Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in kalcaddle kodbox 1.64. The impacted element is an unknown function of the file /workspace/source-code/plugins/oauth/controller/bind/index.class.php of the component loginSubmit API. Performing a manipulation of the argument third results in cross-site request forgery. Remote exploitation of the attack is possible. A high degree of complexity is needed for the attack. The exploitability is regarded as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-4590 Cross-Site Request Forgery in Kalcaddle Kodbox 1.64 loginSubmit API https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4590
Post summary
A new CVE (CVE‑2026‑4590) disclosing a CSRF flaw in the Kalcaddle Kodbox 1.64 loginSubmit API has been announced, with no exploit or mitigation details provided.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4590 - kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery Intel Report: https://ift.tt/WcgXF9D
Post summary
The alert announces CVE-2026-4590, a CSRF flaw in Kalcaddle Kodbox’s loginSubmit API, and points to an intel report for details.