HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-116748 — Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in hand...

·Source: NIST NVD

Updated:

Executive Summary

Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin. Malicious web pages can read the token from the 409 handshake response and replay it to issue RPC calls, enabling script-torrent-done execution, download-dir changes, or torrent and data deletion.

Analysis

Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin. Malicious web pages can read the token from the 409 handshake response and replay it to issue RPC calls, enabling script-torrent-done execution, download-dir changes, or torrent and data deletion. CVSS Score: 8.8. Published: 2026-10-26T22:16:59.610.

Indicators of Compromise (2)

CVE (1)
CVE-2026-116748
NVDMITRE CVE
Domain (1)
rpc-server.cc
VirusTotalURLhaus
Source Attribution

Originally published by NIST NVD on Oct 26, 2026. Verified by: NIST.

Related Threats

CRITICALApt

Siemens Mendix SAML Module

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-302-01.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens has

CVE-2026-89209
CISA Advisories
CRITICALMalware

Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)

Building your malware analysis lab is a key point before playing with malware. Today, thanks to virtualization, it&&#x23&#x3b;x26&#x3b;&#x23&#x3b;39&#x3b;s convenient to play with snapshots in your lab. Start a new investigation from a clean snapshot and take some more when you reached a critical step. But, if you need to revert to a previous snapshot, all changes applied to the VM are... lost&#x2

SANS ISC
MEDIUMVulnerability

LABScon26 Replay | Keynote: A Sober Analysis of AI Impact

Harvard Professor James Mickens weighs the promises of AI against its potential harms, arguing for hardware-based mechanisms to isolate frontier models.

SentinelLabs