PT-2026-21753 · Binardat · 10G08-0800Gsm Network Switch

Kazuma Matsumoto · Published 2026-02-24 · Updated 2026-03-01 · CVE-2026-27515

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209

Description The web management interface generates predictable numeric session identifiers. This predictability allows an attacker to guess valid session IDs, enabling session hijacking.

Recommendations Update the firmware to version V300SP10260209 or later.

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2026-27515

Affected Products

10G08-0800Gsm Network Switch

References · 11

• https://osv.dev/vulnerability/CVE-2026-27515 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27515 · Security Note
• https://twitter.com/CVEnew/status/2026676460640154057 · Twitter Post
• https://twitter.com/TheHackerWire/status/2026341707005178102 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2026425193657212987 · Twitter Post
• https://vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-predictable-session-identifiers · Note
• https://t.me/CVEtracker/45618 · Telegram Post
• https://binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch · Note
• https://twitter.com/cracbot/status/2028062899340800028 · Twitter Post
• https://twitter.com/CveTodo/status/2026337448922370085 · Twitter Post
• https://twitter.com/CveFindCom/status/2026336745814417526 · Twitter Post