CVE-2026-28761 is a CSRF vulnerability affecting Fujitsu Japan Limited Musetheque V4 Information Disclosure for IPKNOWLEDGE versions V4L1 rev2203.0 and earlier. When a logged-in user visits a malicious webpage, the attacker can induce the user’s browser to perform unauthorized operations on the affected system without their consent. The vulnerability has a CVSS 3.0 base score of 8.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high confidentiality and integrity impacts. No official remediation or patch information is currently provided by the vendor, and the product is not a cloud service.

Successful exploitation can lead to unauthorized actions performed by authenticated users, potentially resulting in disclosure of sensitive information and modification of data. The confidentiality and integrity of the affected system are highly impacted, while availability is not affected. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid visiting untrusted or suspicious websites while logged into the affected product. Implementing CSRF protections such as anti-CSRF tokens and validating the origin of requests may help mitigate risk if possible within the environment.