CVE-2026-89279

MediumCVSS 6.5

Published: 13/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

0th percentile - higher than 0% of all known CVEs

Summary

Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing. This issue affects authtake from v1.3 before v1.4.

Risk Assessment

CSRF may allow an attacker to force unauthorized actions on behalf of a logged-in user, and combined with encryption brute forcing may lead to compromise of authentication data.

Recommendation

Update Authtake to version v1.4 or later. Additionally, implement CSRF protection mechanisms such as anti-CSRF tokens.

Other vulnerabilities in Authtake

CVE-2026-94410Medium
A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected.

Original NVD description (English source)

Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing. This issue affects authtake: from v1.3 before v1.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS