Description
SnapGear Management Console SG560 version 3.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft a malicious web page that automatically submits a form to create a new super user account with full administrative privileges when a logged-in user visits the page.
Exploits (1)
References (5)
Scores
CVSS v3
5.3
EPSS
0.0006
EPSS Percentile
18.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-352
Status
published
Products (1)
securecomputing/snapgear_sg560_firmware
3.1.5
Published
Jan 06, 2026
Tracked Since
Feb 18, 2026