CVE-2024-37774EPSS p9.1%

CVE-2024-37774CVE-2024-37774

sunbirddcim / dctrack

Description

A Cross-Site Request Forgery (CSRF) in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens.

Scoring

CVSS 8.0 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS0.19% probability of exploitation · percentile 9.1% · 2026-08-18T12:04:07Z
Last modified2026-07-05
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.