PT-2026-25691 · Raytha+1 · Raytha

Daniel Basta · CVE-2025-69238 · Published 2026-03-16 · Updated 2026-03-16

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Raytha CMS versions prior to 1.4.6

Description Raytha CMS is susceptible to Cross-Site Request Forgery (CSRF) across multiple endpoints. An attacker can create a malicious website that, when visited by an authenticated user, automatically sends a POST request to an endpoint, potentially leading to unauthorized actions such as data deletion, because token verification is not enforced. The vulnerable endpoints are not specified.

Recommendations Update Raytha CMS to version 1.4.6 or later.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-69238

Affected Products

Raytha

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69238.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-69238 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69238 · Security Note
• https://github.com/raythahq/raytha · Note
• https://twitter.com/CVEnew/status/2033583657324331334 · Twitter Post
• https://raytha.com · Note
• https://t.me/cveNotify/155554 · Telegram Post
• https://cert.pl/en/posts/2026/03/CVE-2025-69236 · Note