PNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller. This affects 0.6.26.
pnp4nagios pnp4nagios 0.6.26