TI-2026-84344 CVE-2026-121451 · GHSA-v768-hp7c-4rf7
Cross-site request forgery in AB Download Manager enables file writes
Priority LOW 37
AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated browser-integration API that allows remote attackers to write attacker-chosen files to arbitrary paths.