CVE-2026-62139

An unauthenticated Cross Site Request Forgery (CSRF) vulnerability exists in Site Kit by Google versions up to 1.186.0, allowing attackers to perform unauthorized actions on behalf of users without their consent. This could lead to data manipulation or exposure, impacting the integrity of user accounts and site functionality. Organizations using affected versions should prioritize patching to mitigate potential exploitation risks.