CVE-2026-116839
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
Risk Assessment
An authenticated user visiting a malicious page could unknowingly cause airMAX M device unavailability, disrupting network operations.
Recommendation
Update airMAX M device firmware to a version containing the fix and log out of the administrative panel after use.
Other vulnerabilities in airMAX M
See all- CVE-2026-116838High
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
- CVE-2026-116836High
A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.
Original NVD description (English source)
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS