Istax
Monthly
Privilege escalation in Microchip IStaX before 2026.03 allows an authenticated low-privileged web user to derive the shared per-device cookie secret directly from their own webstax_auth session cookie and mint a forged cookie granting full administrative access. Because the secret is common to the device rather than per-user and can be reconstructed from an already-issued cookie, any account holder can self-elevate to admin. There is no public exploit identified at time of analysis, and EPSS is very low (0.04%), but the technical impact is total.
Privilege escalation in Microchip IStaX before 2026.03 allows an authenticated low-privileged web user to derive the shared per-device cookie secret directly from their own webstax_auth session cookie and mint a forged cookie granting full administrative access. Because the secret is common to the device rather than per-user and can be reconstructed from an already-issued cookie, any account holder can self-elevate to admin. There is no public exploit identified at time of analysis, and EPSS is very low (0.04%), but the technical impact is total.