Predictable CSRF Tokens Mitigated in Unknown Product
CVE-2026-19636 Published on August 14, 2026
Insuffucient Protections Lead to Brute Force
An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.
Vulnerability Analysis
CVE-2026-19636 is exploitable with network access, requires user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity, and no impact on availability.
Weakness Type
Generation of Incorrect Security Tokens
The product implements a Security Token mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. However, the Security Tokens generated in the system are incorrect.
Products Associated with CVE-2026-19636
Want to know whenever a new CVE is published for Tenable Security Center? stack.watch will email you.
Affected Versions
Tenable, Inc. Security Center:- Before 6.9.0 is affected.