CVE-2026-39619 is a CSRF vulnerability in priyanshumittal Busiprof (versions <= 2.5.2) that permits attackers to upload a web shell to the affected web server. This vulnerability allows unauthorized actions to be performed via forged requests, resulting in high impact on confidentiality, integrity, and availability. The CVSS 3.1 base score is 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and scope change. No official remediation or patch is currently documented, and the product is not a cloud service, so remediation depends on vendor or user action.

Successful exploitation of this CSRF vulnerability enables an attacker to upload a web shell, which can lead to complete compromise of the affected web server. This impacts confidentiality, integrity, and availability of the system. Given the critical CVSS score of 9.6, the vulnerability poses a severe risk to affected installations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying anti-CSRF tokens, restricting access controls, and limiting user privileges to reduce risk. Monitor for updates from the vendor priyanshumittal regarding patches or mitigations.