CVE-2026-27517: medium-severity vulnerability in Binardat Ltd. 10G08-0800GSM Network Switch
Binardat 10G08-0800GSM Network Switch XSS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.1epss 0.2%
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior reflect unsanitized user input in the web interface, allowing an attacker to inject and execute arbitrary JavaScript in the context of an authenticated user.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Affected products
Binardat Ltd. · 10G08-0800GSM Network SwitchRelated CVEs — Binardat Ltd. 10G08-0800GSM Network Switch
In the same product, most dangerous first.
CVE-2026-23678HIGHBinardat 10G08-0800GSM Network Switch Traceroute CLI Command InjectionEPSS 1.4%CVE-2026-27507CRITICALBinardat 10G08-0800GSM Network Switch Hard-coded CredentialsEPSS 0.4%CVE-2026-27515CRITICALBinardat 10G08-0800GSM Network Switch Predictable Session IdentifiersEPSS 0.4%CVE-2026-27521MEDIUMBinardat 10G08-0800GSM Network Switch Missing Login Rate LimitingEPSS 0.3%CVE-2026-27520HIGHBinardat 10G08-0800GSM Network Switch Base64-encoded Password Stored in CookieEPSS 0.2%CVE-2026-27519HIGHBinardat 10G08-0800GSM Network Switch Hard-coded RC4 Encryption KeyEPSS 0.2%