CVE-2016-10309

CRITICAL · CVSS 9.8 EPSS 1.68%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-03-30 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-10309

Severity

CRITICAL

CVSS

9.8

EPSS

1.68%

Original Filing — NVD Description

In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass authentication by adding an ALBATROSS cookie with the value 0-4-11 to their browser.