Medium · 6.5 CVE-2026-89279 EUVD-2026-98473GHSA-54qm-8vvv-7m55

Active Directory Password Change CSRF in AuthTake Technology's authtake

Published Oct 13, 2026 · Updated Oct 16, 2026 · Assigned by TR-CERT

Description

Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing.

This issue affects authtake: from v1.3 before v1.4.

Vendor	Product	Affected	Fixed
AuthTake Technology	authtake	v1.3 – < v1.4	v1.4