CVE-2026-18819

Received Received - Intake

Cross-Site Request Forgery in RackTables

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: VulDB

Description

A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project maintainer confirms: "[I]t seems plausible, in that RackTables does not at this time have any CSRF prevention. You may assign a CVE ID to this, but there is no guarantee it will be handled in urgent, or even timely, manner, or at all."

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-04

Last Modified

2026-08-04

Generated

2026-08-05

AI Q&A

2026-08-05

EPSS Evaluated

N/A

NVD

CVE-2026-18819

Affected Vendors & Products

Vendor	Product	Version / Range
racktables	racktables	to 0.22.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-352	The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a Cross-Site Request Forgery (CSRF) vulnerability in RackTables versions up to 0.22.0. It allows attackers to trick users into executing unwanted actions on the application without their consent. The vulnerability exists because RackTables lacks CSRF prevention mechanisms.

Detection Guidance

This vulnerability involves a lack of CSRF prevention in RackTables. Detection would require checking if RackTables is installed and verifying if CSRF tokens or protections are missing in the application code or configuration.

Impact Analysis

An attacker could exploit this to perform unauthorized actions on your behalf if you are logged into RackTables. This might include modifying settings, deleting data, or triggering unintended operations. The impact depends on your user privileges within the system.

Mitigation Strategies

Immediate mitigation includes applying CSRF protections such as tokens in forms, updating to a patched version if available, or disabling the application if no patch exists. Monitor vendor updates for fixes.

Hi! I’m here to help you understand CVE-2026-18819. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70