CVE-2026-5791 is a CSRF vulnerability in DivvyDrive Information Technologies Inc.'s DivvyDrive product affecting versions from 4.8.2.9 before 4.8.3.2. The vulnerability allows an attacker to trick authenticated users into submitting unauthorized requests, potentially causing unintended actions with the user's privileges. The CVSS 3.1 base score is 6.5, with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No official patch or vendor advisory detailing remediation is currently available.

Successful exploitation of this CSRF vulnerability could lead to unauthorized actions being performed on behalf of authenticated users, impacting the integrity of the affected system. There is no impact on confidentiality or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as anti-CSRF tokens or other application-layer mitigations if possible. Monitor vendor communications for updates on patches or official workarounds.