CVE-2026-39641 is a CSRF vulnerability in Skywarrior Blackfyre affecting versions up to 2.5.4. The vulnerability allows attackers to trick authenticated users into submitting unwanted requests, potentially causing denial of service or other availability impacts. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, and high availability impact. No patch or remediation guidance is currently provided by the vendor or authoritative sources.

The vulnerability can be exploited remotely without privileges but requires user interaction. It does not compromise confidentiality or integrity but can cause denial of service or availability disruption. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should be cautious of unsolicited requests and consider implementing CSRF protections such as anti-CSRF tokens or same-site cookies if possible.