CVE-2026-116052: LinkStackOrg LinkStack cross-site request forgery

Q: Which deployments are known to be affected?

LinkStackOrg LinkStack versions up to 4.8.8 are identified as affected. The available information does not identify a specific vulnerable function or configuration.

Q: What does exploitation require?

The issue can be exploited remotely with low attack complexity and no attacker privileges, but it requires user interaction. It is classified as cross-site request forgery and may allow unauthorized changes affecting integrity.

Q: Is a vendor fix available?

The supplied information does not report a fix or remediation. It states that the vendor was contacted early but did not respond.

Published Oct 25, 2026

Updated

A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

LinkStackOrg LinkStack<=4.8.8

Event History

Oct 25, 2026

CVE Published

via MITRE·12:15 PM

Data Sourced

via MITRE·12:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are known to be affected?

LinkStackOrg LinkStack versions up to 4.8.8 are identified as affected. The available information does not identify a specific vulnerable function or configuration.

What does exploitation require?

The issue can be exploited remotely with low attack complexity and no attacker privileges, but it requires user interaction. It is classified as cross-site request forgery and may allow unauthorized changes affecting integrity.

Is a vendor fix available?