CVE-2026-57786 is a CSRF vulnerability in purethemes WorkScout-Core that enables authentication bypass. The affected versions include all versions up to and including 1.7.08. The vulnerability allows attackers to perform unauthorized actions by exploiting the lack of proper CSRF protections, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. No official patch or remediation guidance is currently documented.

Successful exploitation of this vulnerability can lead to authentication bypass, allowing attackers to perform actions with the privileges of an authenticated user. This compromises confidentiality, integrity, and availability of the affected system. The vulnerability is exploitable remotely over the network with low complexity but requires user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing additional CSRF protections such as verifying anti-CSRF tokens on sensitive requests or applying web application firewall (WAF) rules to detect and block suspicious requests.