CVE-2026-89279 PUBLISHED

Active Directory Password Change CSRF in AuthTake Technology's authtake

Assigner: TR-CERT
Reserved: 11.09.2026 Published: 13.10.2026 Updated: 13.10.2026

Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing.

This issue affects authtake: from v1.3 before v1.4.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS Score: 6.5

Product Status

Vendor AuthTake Technology Inc.
Product authtake
Versions Default: unaffected
  • affected from v1.3 to v1.4 (excl.)

Credits

  • Koray Danışma finder

References

Problem Types

  • CWE-352 Cross-Site request forgery (CSRF) CWE

Impacts

  • CAPEC-20 Encryption Brute Forcing