CVE-2026-2336 — Weak webstax_auth Cookie Authentication Allows Privilege Escalation
A privilege escalation vulnerability in Microchip IStaX allows an authenticated low-privileged user to recover a shared per-device cookie secret from their own webstax_auth sess…
Published: 2026-04-16 · CVSS: 8.7 · CVSS 4.0
A privilege escalation vulnerability in Microchip IStaX allows an authenticated low-privileged user to recover a shared per-device cookie secret from their own webstax_auth session cookie and forge a new cookie with administrative privileges.This issue affects IStaX before 2026.03.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7