CVE-2015-2916

Cross-site request forgery (CSRF) vulnerability on Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M allows remote attackers to hijack the authentication of arbitrary users.

• CWE-352

• http://www.kb.cert.org/vuls/id/906576Patch, Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/906576Patch, Third Party Advisory, US Government Resource

Published

Sep 21, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2908Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x…
• CVE-2015-2909Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, a…9.8
• CVE-2015-2912The JSONP endpoint in the Studio component in OrientDB Serve…
• CVE-2015-2913server/network/protocol/http/OHttpSessionManager.java in the…
• CVE-2015-2914Securifi Almond devices with firmware before AL1-R201EXP10-L…
• CVE-2015-2915Securifi Almond devices with firmware before AL1-R201EXP10-L…
• CVE-2015-2917Securifi Almond devices with firmware before AL1-R201EXP10-L…
• CVE-2015-2918The Studio component in OrientDB Server Community Edition be…
• CVE-2015-2922The ndisc_router_discovery function in net/ipv6/ndisc.c in t…
• CVE-2015-2923The Neighbor Discovery (ND) protocol implementation in the I…6.5
• CVE-2015-2924The receive_ra function in rdisc/nm-lndp-rdisc.c in the Neig…
• CVE-2015-2925The prepend_path function in fs/dcache.c in the Linux kernel…