CVE-2026-22323: Phoenix Contact Fl Nat 2008

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to trick authenticated users into sending unauthorized POST requests to the device by luring them to a malicious webpage. This can silently alter the device’s configuration without the victim’s knowledge or consent. Availability impact was set to low because after a successful attack the device will automatically recover without external intervention.

Affected products

• Phoenix Contact Fl Nat 2008: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Nat 2208: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Nat 2304-2gc-2sfp: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2005: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2008: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2008f: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2016: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2105: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2108: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2116: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2204-2tc-2sfx: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2205: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2fx: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2fx Sm: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2fx Sm St: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2fx St: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2sfx: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206-2sfx Pn: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2206c-2fx: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2207-Fx: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2207-Fx Sm: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2208: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2208 Pn: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2208c: from 0.0.0, before 3.53 (fixed in 3.53)
• Phoenix Contact Fl Switch 2212-2tc-2sfx: from 0.0.0, before 3.53 (fixed in 3.53)
• and 52 more

Published 2026-03-18. Last modified 2026-06-17.