PT-2026-22374 · Sodola · Sodola Sl902-Swtgw124As

Kazuma Matsumoto · CVE-2026-27756 · Publicado 2026-02-27 · Atualizado 2026-03-03

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SODOLA SL902-SWTGW124AS versions through 200.1.20

Description The software contains a reflected cross-site scripting issue in the management interface. User input is not properly encoded before being displayed, allowing attackers to execute arbitrary JavaScript code in the web interface when visited by authenticated users through crafted malicious URLs.

Recommendations Update to a version beyond 200.1.20.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-27756

Produtos afetados

Sodola Sl902-Swtgw124As

Referências · 8

• https://twitter.com/CVEnew/status/2027466586366599575 · Publicação no Twitter
• https://t.me/CVEtracker/45990 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-27756 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2027474709273510313 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-27756 · Aviso do Fabricante
• https://vulncheck.com/advisories/sodola-sl902-swtgw124as-reflected-xss-in-management-interface · Nota
• https://t.me/cveNotify/154014 · Publicação no Telegram
• https://sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch · Nota