PT-2026-21756 · Binardat · Binardat 10G08-0800Gsm

Kazuma Matsumoto · CVE-2026-27518 · Publicado 2026-02-24 · Atualizado 2026-02-25

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209

Description The Binardat 10G08-0800GSM network switch firmware does not have Cross-Site Request Forgery (CSRF) protections for actions that change the system's state within the administrative interface. This allows an attacker to potentially trick an authenticated administrator into making unwanted configuration changes. CSRF is a type of web security issue where malicious websites, emails, or other communication channels can cause a user's web browser to perform actions on a trusted site when the user is authenticated.

Recommendations Update to a version later than V300SP10260209.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2026-27518

Produtos afetados

Binardat 10G08-0800Gsm

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-27518 · Nota de Segurança
• https://binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch · Nota
• https://twitter.com/CVEnew/status/2026676458052334026 · Publicação no Twitter
• https://t.me/CVEtracker/45621 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2026417514863788228 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-27518 · Aviso do Fabricante
• https://vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-csrf · Nota