CVE-2026-89279: Active Directory Password Change CSRF in AuthTake Technology's authtake
Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing.
This issue affects authtake: from v1.3 before v1.4.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
AuthTake Technology authtake versions from v1.3 before v1.4 are affected. The provided information does not state whether any particular configuration changes exposure.
What does an attacker need to exploit this issue?
The CVSS vector indicates network-accessible exploitation with low attack complexity, no privileges required, and user interaction required. The issue is classified as CSRF.
What is the expected impact?
The reported impact is integrity-only: an attacker may cause unauthorized changes, while no confidentiality or availability impact is listed. The vulnerability description specifically identifies Active Directory password change functionality.