CVE-2026-22323 | BDVDB-2026-320995 Detail

Description#

A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to trick authenticated users into sending unauthorized POST requests to the device by luring them to a malicious webpage. This can silently alter the device’s configuration without the victim’s knowledge or consent. Availability impact was set to low because after a successful attack the device will automatically recover without external intervention.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-03-18Record published in the CVE List.