A vulnerability classified as problematic was found in Microchip IStaX up to 2026.2. Affected by this issue is some unknown functionality. Executing a manipulation of the argument webstax_auth can lead to insufficient entropy.
This vulnerability is tracked as CVE-2026-2336. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is advised.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-2336 | Microchip IStaX up to 2026.2 webstax_auth entropy (EUVD-2026-23272)
A vulnerability classified as problematic was found in Microchip IStaX up to 2026.2. Affected by this issue is some unknown functionality. Executing a…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
CISA-SSVC-Triage (vulnrichment)CVE-2026-2336
Exploitation: none (Keine bekannte Ausnutzung)Automatable: no (Nicht automatisierbar)Technical Impact: total (Vollständig)
Quelle: CISA-ADP vulnrichment · Stand 2026-04-16T17:34:33.723469Z · CISA Coordinator
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Web Referencewww.microchip.com