Description
A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project maintainer confirms: "[I]t seems plausible, in that RackTables does not at this time have any CSRF prevention. You may assign a CVE ID to this, but there is no guarantee it will be handled in urgent, or even timely, manner, or at all."
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | RackTables | 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 0.9, 0.10, 0.11, 0.12, 0.13, 0.14, 0.15, 0.16, 0.17, 0.18, 0.19, 0.20, 0.21, 0.22.0, e5fff9f8aab339798ed47e8c6d7d977ed97a82bd | — |
References
- VDB-385818 | RackTables cross-site request forgery vdb-entry
- VDB-385818 | CTI Indicators (IOB, IOC) signature permissions-required
- CVE-2026-18819 | CVE Analysis and Report third-party-advisory
- Submit #857970 | RackTables f14f64e65ac8d806b1f64a981acb3c6870eeae37 Cross-Site Request Forgery third-party-advisory
- https://github.com/fa1c4/security-advisories/blob/main/RackTables/RackTables_CSRF_report.md related
- https://github.com/fa1c4/security-advisories/tree/main/RackTables/PoC exploit