CVE-2026-22322

published 2026-03-18

CVE-2026-22322: A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk…

Priority P4 32 high 7.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A L

A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk entry containing malicious HTML/JavaScript code. When the affected page is viewed, the injected script executes in the context of the victim’s browser, enabling unauthorized actions such as interface manipulation. The session cookie is secured by the httpOnly Flag. Therefore an attacker is not able to take over the session of an authenticated user.

Affected

77 ranges · showing 25

Vendor	Product	Version range	Fixed in
phoenix_contact	fl_nat_2008	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_nat_2208	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_nat_2304-2gc-2sfp	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2005	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2008	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2008f	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2016	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2105	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2108	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2116	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2204-2tc-2sfx	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2205	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2206-2fx	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2206-2fx_sm	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2206-2fx_sm_st	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2206-2fx_st	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2206-2sfx	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2206-2sfx_pn	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2206c-2fx	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2207-fx	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2207-fx_sm	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2208	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2208_pn	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2208c	>= 0.0.0 < 3.53	3.53
phoenix_contact	fl_switch_2212-2tc-2sfx	>= 0.0.0 < 3.53	3.53

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79