---
id: CVE-2026-89279
title: Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc
summary: >-
  Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc.
  Authtake allows Encryption Brute Forcing.


  This issue affects authtake: from v1.3 before v1.4.
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'
cwe:
  - CWE-352
vendor: AuthTake Technology Inc.
product: authtake
affected:
  - authtake >= v1.3 < v1.4
published: '2026-10-13'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T19:17:44.800'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89279'
references:
  - url: 'https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1310'
    label: iletisim@usom.gov.tr
tags:
  - nvd
  - cve.org
epss: 0.00088
epssPercentile: 0.00359
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-16T18:03:46.215352Z'
ingestedAt: '2026-10-13T12:25:50.640Z'
---

## Overview

Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing.

This issue affects authtake: from v1.3 before v1.4.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.