PT-2026-21756 · Binardat · Binardat 10G08-0800Gsm

Kazuma Matsumoto · Published 2026-02-24 · Updated 2026-02-25 · CVE-2026-27518

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209

Description The Binardat 10G08-0800GSM network switch firmware does not have Cross-Site Request Forgery (CSRF) protections for actions that change the system's state within the administrative interface. This allows an attacker to potentially trick an authenticated administrator into making unwanted configuration changes. CSRF is a type of web security issue where malicious websites, emails, or other communication channels can cause a user's web browser to perform actions on a trusted site when the user is authenticated.

Recommendations Update to a version later than V300SP10260209.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2026-27518

Affected Products

Binardat 10G08-0800Gsm

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-27518 · Security Note
• https://osv.dev/vulnerability/CVE-2026-27518 · Vendor Advisory
• https://binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch · Note
• https://twitter.com/CVEnew/status/2026676458052334026 · Twitter Post
• https://t.me/CVEtracker/45621 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2026417514863788228 · Twitter Post
• https://vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-csrf · Note