CVE-2026-5702: Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application

Published Oct 29, 2026

Updated

Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an attacker can trick an authenticated user into clicking a malicious link or loading a page that sends unauthorized requests to a vulnerable endpoint.

Affected Software

1 affected component

SABBATIC SABBATIC application

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade SABBATIC application to a version that resolves this vulnerability.
Fixed in 7.96.0.1
Upgrade
Upgrade SABBATIC application to a version that resolves this vulnerability.
Fixed in 7.96.0.2

Event History

Oct 29, 2026

CVE Published

via MITRE·11:17 AM

Data Sourced

via MITRE·11:17 AM

RemedyDescriptionWeakness

Frequently Asked Questions

Who is exposed to this issue?

Authenticated users of the SABBATIC application are the target, because exploitation relies on inducing a logged-in user to click a malicious link or load an attacker-controlled page.

What does an attacker need to exploit it?

The attacker needs to persuade an authenticated user to interact with malicious content that causes unauthorized requests to a vulnerable application endpoint.

CVE-2026-5702: Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?