Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2026-19636

Insuffucient Protections Lead to Brute Force

Description

An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenable, Inc. Security Center

Default version status: affected

  • 0 to < 6.9.0affected

References