CVE-2026-88418 Blast Radius

HIGH • CVSS 8.8CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfProtection() into a no-op on every state-changing admin request, and it …

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-88418.

Book a Demo →← Back to CVE-2026-88418