PT-2026-26039 · Unknown · Link Aggregation

Gabriele Quagliarella · Publicado 2026-03-18 · Atualizado 2026-03-18 · CVE-2026-22323

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions Versions prior to patchday 2026-05 (affected versions not specified)

Description A Cross-Site Request Forgery (CSRF) issue exists in the Link Aggregation configuration interface. An unauthenticated remote attacker can deceive authenticated users into submitting unauthorized POST requests to the device. This manipulation can silently modify the device’s configuration without the user’s awareness or permission. The impact on availability is considered low, as the device automatically recovers after a successful attack without requiring external intervention.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2026-22323

Produtos afetados

Link Aggregation

Referências · 6

• https://twitter.com/VulmonFeeds/status/2034219520332558385 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2034365310263075109 · Publicação no Twitter
• https://certvde.com/de/advisories/VDE-2025-104 · Nota
• https://twitter.com/RedPacketSec/status/2034209842525614524 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-22323 · Nota de Segurança
• https://twitter.com/cyberbivash/status/2034190280816001192 · Publicação no Twitter