CVE-2026-27515
Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session identifiers in the web management interface. An attacker can guess valid session IDs and hijack authenticated sessions.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.3
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
- EPSS probability
- 0.32%
- CWE
- CWE-330
- Published
- 2026-02-24
- Last modified
- 2026-03-12
Affected products
- Binardat Ltd. 10G08-0800GSM Network Switch
Weakness type
Related vulnerabilities
- CVE-2023-22601 — InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r
- CVE-2026-27755 — SODOLA SL902-SWTGW124AS <= 200.1.20 Predictable Session ID
- CVE-2026-27637 — FreeScout's Predictable Authentication Token Enables Account Takeover
- CVE-2024-36389 — MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values
- CVE-2025-64097 — NervesHub has Insufficient Token Entropy that Allows Authentication Bypass via Brute Force
- CVE-2025-7783 — Usage of unsafe random function in form-data for choosing boundary
- CVE-2022-26851 — Dell PowerScale OneFS, 8.2.2-9.3.x, contains a predictable file name from observable state vulnerability. An unprivilege
- CVE-2024-1631 — agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`