CVE-2026-62139: Google Site Kit By Google

Medium severity, CVSS 4.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Unauthenticated Cross Site Request Forgery (CSRF) in Site Kit by Google <= 1.186.0 versions.

Affected products

• Google Site Kit By Google: up to and including 1.186.0

Published 2026-09-11. Last modified 2026-09-11.