cleantalk
Vulnerabilities and Security Researches

Site Kit by Google – Analytics, Search Console, AdSense, Speed, CVE-2026-62139

CVE, Research URL

CVE-2026-62139

Published on
Sep 12, 2026
Research Description
Unauthenticated Cross Site Request Forgery (CSRF) in Site Kit by Google <= 1.186.0 versions.
Affected versions
max 1.187.0.
Status
vulnerable