CSRF in Ercom Cryptobox
CVE-2025-14266
CSRF in Ercom Cryptobox administration console allows attacker to trigger some actions on behalf of a Cryptobox administrator. The attack requires the administrator to browse a malicious web site or to click a link while he has an open session on the administration console.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.002 (7.1th percentile) — read the EPSS interpretation.
Affected products
- Ercom Cryptobox — versions 4.0.0, 4.38.0