CVE-2026-62139

Unauthenticated Cross Site Request Forgery (CSRF) in Site Kit by Google <= 1.186.0 versions.

Published Sep 11, 2026
CVSS 4.3 medium
0.1% chance of exploitation in the next 30 days (EPSS)

Affected software

Google Site Kit by Google

CVE-2026-62139 at the National Vulnerability Database