CVE-2026-52800: Csrf State Changing Get Routecve-2026-52800-csrf-state-changing-get-route
State-changing operations registered to accept GET requests are vulnerable to Cross-Site Request Forgery (CSRF). GET requests are typically unprotected by anti-CSRF tokens and can be easily triggered by navigating to a URL or loading an image. Ensure you use POST, PUT, DELETE, or PATCH for operations that modify state on the server.
