CVE-2026-5618
Last modified
CVE-2026-5618 is a medium-severity vulnerability rated 5.6/10 on the CVSS scale. A vulnerability was detected in kalcaddle kodbox up to 1.64. This affects an unknown function of the component shareMake/shareCheck. EPSS estimates a 0.32% chance of exploitation in the next 30 days.
Description
A vulnerability was detected in kalcaddle kodbox up to 1.64. This affects an unknown function of the component shareMake/shareCheck. Performing a manipulation of the argument siteFrom/siteTo results in server-side request forgery. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is reported as difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-5618?
How severe is CVE-2026-5618?
How do I fix CVE-2026-5618?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-56173Use after free in Windows WebView allows an authorized attac…7
- CVE-2026-56174Untrusted search path in Windows Narrator Braille allows an …7.8
- CVE-2026-56175Heap-based buffer overflow in Windows NTFS allows an authori…7.8
- CVE-2026-56176Out-of-bounds read in Windows Win32K - GRFX allows an author…7.8
- CVE-2026-56178Time-of-check time-of-use (toctou) race condition in Microso…7
- CVE-2026-56179Origin validation error in Windows Network Address Translati…8.3
- CVE-2026-56181Origin validation error in Windows Network Address Translati…8.3
- CVE-2026-56182Integer overflow or wraparound in Windows NTFS allows an aut…7.8
- CVE-2026-56183Use after free in Windows MIDI Service Module allows an auth…7
- CVE-2026-56184Exposure of sensitive information to an unauthorized actor i…5.5
- CVE-2026-56185Improper authentication in Windows Admin Center allows an au…6.5
- CVE-2026-56186Out-of-bounds read in Windows Schannel allows an authorized …6.5
Are you affected by CVE-2026-5618?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST