romain-deperne/CVE-2026-40864

PoC

JupyterHub CSRF via cross-origin form POST — CVE-2026-40864 / CVSS 5.4

view exploit source poc_in_githubauthor romain-depernepublished 2026-06-13catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-40864US	medium4.3	0.15% (4th)	Exploit	2026-05-22
JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through 5.4.4, XSRF protection (updated in 4.1.0) inappropriately tr…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.