CVE-2026-84759

The vulnerability allows unauthenticated attackers to exploit Cross Site Request Forgery (CSRF) in Activity Log versions up to 2.13.1, potentially leading to unauthorized actions being performed on behalf of users without their consent. Organizations using affected versions should prioritize patching this issue to mitigate the risk of unauthorized access and data manipulation. It is particularly critical for those handling sensitive user data or operating in regulated environments.