Stored Cross-Site Scripting Vulnerability in Link Aggregation Configuration by Vendor

CVE-2026-22322

What is CVE-2026-22322?

A stored cross-site scripting vulnerability exists in the Link Aggregation configuration interface, allowing unauthenticated remote attackers to inject malicious HTML or JavaScript code. This code executes when the compromised page is accessed, potentially enabling unauthorized actions within the victim's browser session. While the session cookie is protected by the httpOnly flag, which prevents session hijacking, the vulnerability still poses significant security risks and could lead to various forms of interface manipulation by attackers.

References