TI-2019-15760 CVE-2019-25708 · GHSA-3g23-vj39-72pvHeatmiser Wifi Thermostat 1.7 Cross-Site Request ForgeryPriority MEDIUM 57Heatmiser Wifi Thermostat 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials by tricking authenticated users into submitting malicious requests.CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00129 · Published 2026-04-12 · No fix listed CWE-352