CVE-2026-19786: francoisjacquet RosarioSIS Modules.php cross-site request forgery

Q: What is the severity of CVE-2026-19786?

CVE-2026-19786 has a medium severity rating of 4.3.

Q: How do I fix CVE-2026-19786?

To fix CVE-2026-19786, upgrade the software to version 12.9 or higher.

Q: What type of vulnerability is CVE-2026-19786?

CVE-2026-19786 is a cross-site request forgery (CSRF) vulnerability.

Q: Can CVE-2026-19786 be exploited remotely?

Yes, CVE-2026-19786 can be exploited remotely.

Q: Which file is affected by CVE-2026-19786?

The vulnerability in CVE-2026-19786 affects the Modules.php file.

Published Aug 14, 2026

Updated

A vulnerability was found in francoisjacquet RosarioSIS up to 12.8. This issue affects some unknown processing of the file Modules.php. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. Upgrading to version 12.9 is capable of addressing this issue. The patch is named 801a71272c82cf4bf695fdc5ed42a9b7511d124d. It is recommended to upgrade the affected component.

Affected Software

1 affected component

francoisjacquet RosarioSIS<=12.8

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade francoisjacquet RosarioSIS to a version that resolves this vulnerability.
Fixed in 12.9Patch 801a71272c82cf4bf695fdc5ed42a9b7511d124d

Event History

Aug 14, 2026

CVE Published

via MITRE·02:30 AM

Data Sourced

via MITRE·02:30 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-19786?

CVE-2026-19786 has a medium severity rating of 4.3.

How do I fix CVE-2026-19786?

To fix CVE-2026-19786, upgrade the software to version 12.9 or higher.

What type of vulnerability is CVE-2026-19786?

CVE-2026-19786 is a cross-site request forgery (CSRF) vulnerability.

Can CVE-2026-19786 be exploited remotely?