Is CVE-2026-19636 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-19636?

CVE-2026-19636 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-19636

Description

An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.