Vulnerability · Published Aug 14, 2026 · Assigned by tenable
CVE-2026-19636Insuffucient Protections Lead to Brute Force
Medium 5.3
In plain English
A medium-severity security flaw in Security Center from Tenable, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.3%top 82.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Tenable, Inc. | Security Center | 0 – before 6.9.0 |
Weakness: CWE-1270 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
References
- https://www.tenable.com/security/tns-2026-22 vendor-advisory