A vulnerability has been found in Concrete CMS up to 9.5.0 and classified as problematic. This affects an unknown function of the component File Deletion Endpoint. Performing a manipulation results in cross-site request forgery.
This vulnerability is cataloged as CVE-2026-7882. It is possible to initiate the attack remotely. There is no exploit available.
