CVE Catalog
CVE-2026-19636
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.26%
18th percentile - higher than 18% of all known CVEs
Summary
CSRF tokens were generated using a predictable method, reducing their effectiveness. This has been addressed by improving randomness and entropy of token generation.
Risk Assessment
Risk of CSRF attacks due to predictable tokens, potentially leading to unauthorized actions.
Recommendation
Upgrade to a patched version and implement strong token generation mechanisms.
Original NVD description (English source)
An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.