CVE-2026-1468

QuickCMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. An attacker can craft special website, which when visited by the victim, will automatically send a POST request with victim's privileges. This software does not implement any protection against this type of attack. All forms available in this software are potentially vulnerable. This issue was fixed in a patch to version 6.8 published on 14.05.2026, deployments without this patch are still vulnerable

• CWE-352

• https://cert.pl/posts/2026/03/CVE-2026-1468
• https://opensolution.org/cms-system-quick-cms.html

Published

Mar 6, 2026

Last Modified

Aug 4, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-14672Observable response discrepancy in PostgreSQL SCRAM authenti…5.3
• CVE-2026-14673Untrusted search path in PostgreSQL amcheck allows a grantee…3.8
• CVE-2026-14676Heap buffer overflow in PostgreSQL pg_stat_statements allows…8.8
• CVE-2026-14677Integer wraparound in PostgreSQL 32-bit builds of pltcl and …8.8
• CVE-2026-14678Buffer over-read in PostgreSQL pg_trgm index picksplit funct…4.3
• CVE-2026-14679Stack buffer overflow in PostgreSQL argument name matching a…8.2
• CVE-2026-14680Type confusion with PostgreSQL "internal" data type argument…8.8
• CVE-2026-14681Improper enforcement of message integrity in PostgreSQL GSSA…4.2
• CVE-2026-14682In Bouncy Castle for Java before 1.85, Possible OOM from unb…7.5
• CVE-2026-14683A vulnerability was detected in HdrHistogram up to 2.2.2. Af…3.3
• CVE-2026-14684A flaw has been found in HdrHistogram up to 2.2.2. This affe…3.3
• CVE-2026-14685A vulnerability has been found in HdrHistogram up to 2.2.2. …3.3