Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation Read more