What is GHSA-vvf7-cx4c-9x2c?

GHSA-vvf7-cx4c-9x2c is a security advisory published by GitHub Security Advisories with unknown severity. A Cross-Site Request Forgery (CSRF) vulnerability exists in the xxl-job-admin web application v.3...

Which CVE IDs does GHSA-vvf7-cx4c-9x2c cover?

GHSA-vvf7-cx4c-9x2c covers the following CVE IDs: CVE-2026-26718. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-vvf7-cx4c-9x2cunknown

A Cross-Site Request Forgery (CSRF) vulnerability exists in the xxl-job-admin web application v.3...

Vendor

GitHub Security Advisories

Published

July 16, 2026

Last Modified

July 16, 2026

🔗 CVE IDs covered (1)

CVE-2026-26718 →

📋 Description

A Cross-Site Request Forgery (CSRF) vulnerability exists in the xxl-job-admin web application v.3.0.0 that allows an attacker to perform unauthorized modifications to Glue IDE shell scripts. The affected endpoint lacks proper CSRF token validation and accepts arbitrary HTTP methods via a permissive request mapping

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-26718
https://github.com/Ibrahim-Sartawi/CVE-2026-26718
https://xxl-job-admin.com
https://github.com/advisories/GHSA-vvf7-cx4c-9x2c