CVE-2016-10309

CVE-2016-10309 describes a critical authentication bypass vulnerability in the GUI of Ceragon FibeAir IP-10 devices running firmware versions prior to 7.2.0. A remote attacker can exploit this by adding a specific ALBATROSS cookie to their browser, gaining unauthorized access. This vulnerability carries a CVSSv3 score of 9.8 (Critical) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no public exploits or active exploitation have been identified, and community discussion is minimal, the ease of exploitation and severe consequences warrant attention.