CVE-2026-1169

birkir prime cross-site request forgery

CVSS 5.3 MEDIUMEPSS 0.2%CWE-352 CWE-862

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

19 Jan 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A security vulnerability has been detected in birkir prime up to 0.4.0.beta.0. This vulnerability affects unknown code. Such manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Affected products

birkir · prime

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/birkir/prime/https://github.com/birkir/prime/issues/547 https://vuldb.com/?ctiid.341763 https://vuldb.com/?id.341763 https://vuldb.com/?submit.731287