CVE-2025-14266

Publication date

2025-12-17 13:38:22

Family

THA-PSIRT

State

PUBLISHED

Description

CSRF in Ercom Cryptobox administration console allows attacker to trigger some actions on behalf of a Cryptobox administrator. The attack requires the administrator to browse a malicious web site or to click a link while he has an open session on the administration console.