PT-2026-21755 · Binardat · 10G08-0800Gsm Network Switch

Kazuma Matsumoto · Published 2026-02-24 · Updated 2026-02-25 · CVE-2026-27517

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209

Description The web interface does not properly sanitize user input, which allows an attacker to inject and execute arbitrary JavaScript code within the context of an authenticated user. This can lead to compromise of the user's session and potentially the device itself.

Recommendations Update to a version later than V300SP10260209.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-27517

Affected Products

10G08-0800Gsm Network Switch

References · 7

• https://osv.dev/vulnerability/CVE-2026-27517 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27517 · Security Note
• https://twitter.com/VulmonFeeds/status/2026422633806397670 · Twitter Post
• https://t.me/CVEtracker/45620 · Telegram Post
• https://twitter.com/CVEnew/status/2026676458916294829 · Twitter Post
• https://binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch · Note
• https://vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-xss · Note