PNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller. This affects 0.6.26.Referenceshttps://github.com/pnp4nagios/pnp4nagios/pull/17