CVE-2026-38057 | ST Engineering iDirect Evolution iQ-Series terminals up to 4.5.2.1 API endpoint /api/reboot SameSite cross-site request forgery

A vulnerability was found in ST Engineering iDirect Evolution iQ-Series terminals, 3315-Series and 9-Series Terminals up to 4.5.2.1. It has been classified as problematic. This impacts the function reboot of the file /api/reboot of the component API endpoint. Performing a manipulation of the argument SameSite results in cross-site request forgery....