CVE-2026-22323
A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to trick authenticated users into sending unauthorized POST requests to the device by luring them to a malicious webpage. This can silently alter the device’s configuration without the victim’s knowledge or consent. Availability impact was set to low because after a successful attack the device will automatically recover without external intervention.
Vendor
-
Product
-
CWE
Yayın Tarihi
2026-03-18 08:16:30
Güncelleme
2026-03-18 14:52:44
Source Identifier
info@cert.vde.com
KEV Date Added
-