CVE-2026-18819
RackTables cross-site request forgery
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project maintainer confirms: "[I]t seems plausible, in that RackTables does not at this time have any CSRF prevention. You may assign a CVE ID to this, but there is no guarantee it will be handled in urgent, or even timely, manner, or at all."
| CWE | CWE-352 CWE-862 |
| Vendor | n/a |
| Product | racktables |
| Published | Aug 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a racktables
Be the first to know when new medium vulnerabilities affecting n/a racktables are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:U/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / RackTables
0.1 0.2 0.3 0.4 0.5 0.6 0.7 0.8 0.9 0.10 0.11 0.12 0.13 0.14 0.15 0.16 0.17 0.18 0.19 0.20 0.21 0.22.0 e5fff9f8aab339798ed47e8c6d7d977ed97a82bd
References
vuldb.com: https://vuldb.com/vuln/385818 vuldb.com: https://vuldb.com/vuln/385818/cti vuldb.com: https://vuldb.com/cve/CVE-2026-18819 vuldb.com: https://vuldb.com/submit/857970 github.com: https://github.com/fa1c4/security-advisories/blob/main/RackTables/RackTables_CSRF_report.md github.com: https://github.com/fa1c4/security-advisories/tree/main/RackTables/PoC
Credits
🔍 fa1c4 (VulDB User) VulDB CNA Team