{"self":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-15080","first":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-15080\u0026page=0","last":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-15080\u0026page=0","list":[{"field_issue_status":"7","field_project":{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/1118924","id":"1118924","resource":"node"},"field_sa_advisory_id":"071","field_sa_coordinated_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/greggles\u0022 rel=\u0022nofollow\u0022\u003EGreg Knaddison (greggles)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/poker10\u0022 rel=\u0022nofollow\u0022\u003EJuraj Nemec (poker10)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/prudloff\u0022 rel=\u0022nofollow\u0022\u003EPierre Rudloff (prudloff)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_criticality":"AC:Complex\/A:None\/CI:None\/II:Some\/E:Theoretical\/TD:All","field_sa_description":{"value":"\u003Cp\u003EThe Lingotek Ray Enterprise Translation module provides multilingual site management.\u003C\/p\u003E\n\u003Cp\u003EThe module fails to protect several state-changing administrative routes against Cross Site Request Forgery attacks. An attacker could trick a privileged user into visiting a crafted page that triggers actions such as updating callback settings, uploading or downloading translations, or changing translation state. \u003C\/p\u003E","format":"1"},"field_sa_fixed_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/naresh_bavaskar\u0022 rel=\u0022nofollow\u0022\u003ENaresh Bavaskar (naresh_bavaskar)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_reported_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/prudloff\u0022 rel=\u0022nofollow\u0022\u003EPierre Rudloff (prudloff)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_solution":{"value":"\u003Cp\u003EInstall the latest version appropriate for your site\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EIf you use the Ray Enterprise Translation module, upgrade to \u003Ca href=\u0022https:\/\/www.drupal.org\/project\/lingotek\/releases\/11.0.4\u0022 rel=\u0022nofollow\u0022\u003ERay Enterprise Translation 11.0.4\u003C\/a\u003E\u003C\/li\u003E\n\u003Cli\u003EIf you use the Ray Enterprise Translation module, upgrade to \u003Ca href=\u0022https:\/\/www.drupal.org\/project\/lingotek\/releases\/4.1.4\u0022 rel=\u0022nofollow\u0022\u003ERay Enterprise Translation 4.1.4\u003C\/a\u003E\u003C\/li\u003E\n\u003Cli\u003EIf you use the Ray Enterprise Translation module, upgrade to \u003Ca href=\u0022\/\/www.drupal.org\/project\/lingotek\/releases\/4.0.4\u0022 rel=\u0022nofollow\u0022\u003ERay Enterprise Translation 4.0.4\u003C\/a\u003E\u003C\/li\u003E\n\u003C\/ul\u003E","format":"1"},"field_sa_type":"Cross site request forgery","field_issue_last_status_change":"1784660768","field_sa_cve":["CVE-2026-15080"],"field_is_psa":"0","field_affected_versions":"\u003C4.0.4 || \u003E=4.1.0 \u003C4.1.4 || \u003E=11.0.0 \u003C11.0.4","field_fixed_in":[{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3609133","id":"3609133","resource":"node"},{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3609136","id":"3609136","resource":"node"},{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3609138","id":"3609138","resource":"node"}],"nid":"3609328","vid":"14439285","is_new":false,"type":"sa","title":"Ray Enterprise Translation - Moderately critical - Cross site request forgery - SA-CONTRIB-2026-071","language":"en","url":"https:\/\/www.drupal.org\/sa-contrib-2026-071","edit_url":"https:\/\/www.drupal.org\/node\/3609328\/edit","status":"1","promote":"0","sticky":"0","created":"1783530824","changed":"1784660768","author":{"uri":"https:\/\/www.drupal.org\/api-d7\/user\/406161","id":"406161","resource":"user","name":"Drupal Security Team"},"comment":"0","comments":[{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16677281","id":16677281,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16677282","id":16677282,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16677283","id":16677283,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16677284","id":16677284,"resource":"comment"}],"comment_count":0,"comment_count_new":false,"body":[],"feeds_item_guid":null,"feeds_item_url":null,"feed_nid":null,"flag_flag_tracker_follow_user":[],"flag_tracker_follower_count":null,"has_new_content":null,"last_comment_timestamp":"1783530824"}]}