CVE-2025-26570 describes a CSRF vulnerability in the uamv Glance That product affecting versions through 4.9. The vulnerability allows attackers to perform unauthorized actions on behalf of authenticated users by exploiting the lack of proper request validation. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, and the product is not a cloud service.

Successful exploitation of this CSRF vulnerability could allow attackers to cause unauthorized state-changing actions within the affected application, impacting confidentiality, integrity, and availability of the system. The high CVSS score reflects these potential impacts. However, there are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing standard CSRF mitigations such as verifying anti-CSRF tokens and restricting sensitive actions to POST requests with proper validation. Monitor vendor channels for updates.