EUVD-2026-72789
GHSA-ccg2-64fc-r6w8
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attacker requires valid account (PR:L), victim must interact with malicious page (UI:R), and impact is limited to audit trail integrity (I:L), with no confidentiality or availability consequence.
Primary rating from Vendor (nozominetworks).
CVSS VectorVendor: nozominetworks
Lifecycle Timeline
2DescriptionCVE.org
A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performed by the victim in this state is attributed to the attacker's account, compromising the integrity of the audit trail.
AnalysisAI
Login CSRF in a Nozomi Networks web-based platform - affecting both standard credential and SAML authentication flows - allows a network-accessible attacker holding a valid account to trick a victim into silently authenticating under the attacker's identity, causing the victim's subsequent actions to be attributed to the attacker's account in the audit log. The root cause is the absence of anti-CSRF token validation on the login endpoints themselves, a class of flaw distinct from conventional post-login CSRF. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must hold a valid account on the targeted Nozomi Networks instance (confirmed by PR:L in the CVSS 4.0 vector). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 5.1 is a reasonable calibration: PR:L confirms the attacker must possess a valid account, and UI:P requires the victim to passively interact with attacker-controlled content, limiting automated or opportunistic exploitation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Obtain and apply the vendor-released patch per Nozomi Networks advisory NN-2026:18-01 at https://security.nozominetworks.com/NN-2026:18-01. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-352 – Cross-Site Request Forgery (CSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today