CVE-2026-15080

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Ray Enterprise Translation allows Cross Site Request Forgery. This issue affects Ray Enterprise Translation versions: from 0.0.0 to 4.0.4, from 4.1.0 to 4.1.4, from 11.0.0 to 11.0.4.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - mlhess@drupal.org

Published

2026-07-10

Last modified

2026-10-25

Weaknesses

CWE-352

Affected products

• Ray Enterprise Translation (Drupal)
• Ray Enterprise Translation (Lingotek)

References

• https://www.drupal.org/sa-contrib-2026-071