CVE-2026-19636: Insuffucient Protections Lead to Brute Force
Published Aug 14, 2026
·Updated
An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Tenable Security Centerto a version that resolves this vulnerability.Fixed in 6.9.0
Event History
Aug 14, 2026
CVE Published
via MITRE·05:24 PM
Data Sourced
via MITRE·05:24 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-19636?
The severity of CVE-2026-19636 is medium with a score of 5.3.
2
What does CVE-2026-19636 affect?
CVE-2026-19636 affects systems that employ predictable CSRF token generation methods.
3
How do I fix CVE-2026-19636?
To fix CVE-2026-19636, improve the randomness and entropy of the CSRF token generation process.
4
What risk is associated with CVE-2026-19636?
CVE-2026-19636 has an associated risk score of 31.
5
Is user interaction required for CVE-2026-19636 exploitation?
Yes, user interaction is required for the exploitation of CVE-2026-19636.