CSRF Vulnerability in Link Aggregation Configuration Interface by Vendor XYZ

CVE-2026-22323

What is CVE-2026-22323?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Link Aggregation configuration interface, allowing an unauthenticated remote attacker to manipulate device settings. Attackers can exploit this vulnerability by enticing authenticated users to visit a malicious webpage, which triggers unauthorized POST requests. This attack can go unnoticed, modifying device settings without the user's knowledge or consent. Although the device will restore its previous state after the attack, the possibility of unauthorized changes poses significant security risks.

References