CVE-2026-28761 Fujitsu Japan Limited CVE debrief

Who should care

Defenders and administrators of Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier should assess potential exposure and impact.

Why it matters

Defenders should prioritize verifying exposure and assessing potential impact of the cross-site request forgery vulnerability in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier, focusing on user interactions with the affected product.

• Unexpected operations may be performed on the affected product
• User interactions with the affected product may lead to security consequences

Technical summary

A cross-site request forgery vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier. If a user views a malicious page while logged-in to the affected product, unexpected operations may be done. This type of vulnerability can allow attackers to perform unauthorized actions on the affected system, potentially leading to security consequences. The vulnerability is related to how the affected product handles user requests, and defenders should focus on user interactions with the product to assess potential exposure and

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact, focusing on user interactions with the affected product.

Recommended defensive actions

• Verify exposure by checking user interactions with the affected product
• Assess potential impact of unexpected operations
• Monitor for suspicious activity

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability, with the NVD entry currently listed as Deferred. The CVE Program record and NVD detail page offer source-provided CVE metadata and official vulnerability assessment, respectively. However, additional details about the vulnerability, such as its scope, severity, and potential impact, are not available. Defenders should verify exposure by checking user interactions with the affected product and assess the

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.