CVE-2026-73780

Name of the Vulnerable Software and Affected Versions AOS-CX switches (affected versions not specified)

Description The web-based management interface lacks Cross-Site Request Forgery (CSRF) protection for certain sessions. This allows a remote unauthenticated attacker to execute arbitrary input against the interface by tricking an authenticated user into interacting with a specially crafted URL. CSRF is a technique where an attacker induces a user to perform actions they did not intend to do on a different website.

Recommendations Restrict access to the web UI immediately.