CVE-2023-41086

Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless LAN access point devices. If a user views a malicious page while logged in, unintended operations may be performed. Affected products and versions are as follows: ACERA 1210 firmware ver.02.36 and earlier, ACERA 1150i firmware ver.01.35 and earlier, ACERA 1150w firmware ver.01.35 and earlier, ACERA 1110 firmware ver.01.76 and earlier, ACERA 1020 firmware ver.01.86 and earlier, ACERA 1010 firmware ver.01.86 and earlier, ACERA 950 firmware ver.01.60 and earlier, ACERA 850F firmware ver.01.60 and earlier, ACERA 900 firmware ver.02.54 and earlier, ACERA 850M firmware ver.02.06 and earlier, ACERA 810 firmware ver.03.74 and earlier, and ACERA 800ST firmware ver.07.35 and earlier. They are affected when running in ST(Standalone) mode.

• CWE-352

• https://jvn.jp/en/vu/JVNVU94497038/Third Party Advisory
• https://www.furunosystems.co.jp/news/info/vulner20231002.htmlVendor Advisory
• https://jvn.jp/en/vu/JVNVU94497038/Third Party Advisory
• https://www.furunosystems.co.jp/news/info/vulner20231002.htmlVendor Advisory

Published

Oct 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-4108Mattermost fails to sanitize post metadata during audit logg…7.5
• CVE-2023-41080URL Redirection to Untrusted Site ('Open Redirect') vulnerab…6.1
• CVE-2023-41081Important: Authentication Bypass CVE-2023-41081 The mod_jk …7.5
• CVE-2023-41082Null pointer dereference for some Intel(R) CST software befo…4.4
• CVE-2023-41084 Session management within the web application is …9.8
• CVE-2023-41085 When IPSec is configured on a Virtual Server, undisclosed t…7.5
• CVE-2023-41088 The affected product is vulnerable to a cleartext…6.5
• CVE-2023-41089 The affected product is vulnerable to an improper a…8.8
• CVE-2023-4109The Ninja Forms WordPress Ninja Forms Contact Form WordPress…4.8
• CVE-2023-41090Race condition in some Intel(R) MAS software before version …6.4
• CVE-2023-41091Uncontrolled search path for some Intel(R) MPI Library Softw…7.8
• CVE-2023-41092Unchecked return value in SDM firmware for Intel(R) Stratix …7.6