CVE-2026-28761 Cross-site request forgery in Musetheque V4 Information Disclosure for IPKNOWLEDGE
A cross-site request forgery flaw allows attackers to perform unexpected operations on behalf of logged-in users in Musetheque V4.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-28761?
CVE-2026-28761 is a high-severity vulnerability in Fujitsu Japan Limited Musetheque V4 Information Disclosure for IPKNOWLEDGE, published on 15 May 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Cross-site request forgery vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier. If a user views a malicious page while logged-in to the affected product, unexpected operations may be done.
Weakness: CWE-352
Which versions are affected by CVE-2026-28761?
How do I fix CVE-2026-28761?
No fix has been published for CVE-2026-28761 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-28761 being exploited?
There is no known exploitation of CVE-2026-28761 in the wild and no public exploit code.
Sources
Also known as GHSA-626v-69jf-vxq8.