THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-19906 (LOW 3.7) — A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy.

[NVD] CVE-2026-19906 (LOW 3.7) — A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy.

highnvdPublished 2026-08-15

CVE-2026-19906 CVSS: 3.7 LOW Published: 2026-08-15T19:16:32.470

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may be performed from remote. This attack i

Indicators of compromise

529b5df878e571ccc727647f7748eafc1466b041sha1
CVE-2026-19906cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19906