CVE-2026-60041 is a vulnerability that allows an unauthenticated remote attacker to perform a Cross-Site Request Forgery (CSRF) attack on a logged-in backend user. This attack can lead to execution of critical system actions such as shutting down the server or restoring an uploaded backup, resulting in loss of system integrity and availability.