The Webriti Wallstreet application is affected by a CSRF vulnerability (CVE-2026-39718) in versions up to 2.8.6. This vulnerability enables attackers to trick authenticated users into submitting unwanted requests, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this CSRF vulnerability can result in complete compromise of the affected system's confidentiality, integrity, and availability. Attackers can perform unauthorized actions as the victim user, potentially leading to data theft, modification, or service disruption.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing CSRF protections such as anti-CSRF tokens and verifying the origin of requests as a temporary mitigation.