CVE-2019-9926: Labkey Server

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An issue was discovered in LabKey Server 19.1.0. It is possible to force a logged-in administrator to execute code through a /reports-viewScriptReport.view CSRF vulnerability.

Affected products

• Labkey Labkey Server: version 19.1.0 only

Published 2019-10-29. Last modified 2026-06-17.