CVE-2026-27515CRITICAL 9.1EPSS p23.7%

CVE-2026-27515CVE-2026-27515

Description

Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session identifiers in the web management interface. An attacker can guess valid session IDs and hijack authenticated sessions.

Scoring

CVSS 3.19.1 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS0.32% probability of exploitation · percentile 23.7% · 2026-06-18T12:00:27Z
Published2026-02-24
Last modified2026-02-25

Underlying weaknesses· 1

CWE-330

References

  1. https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch
  2. https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-predictable-session-identifiers

1

TypeTargetConfidenceTier
WeaknessUse of Insufficiently Random Valuescwe-3300%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-27507
CVE
CVE-2026-23678
CVE
CVE-2026-25072
CVE
CVE-2025-52689
CVE
CVE-2025-71056
CVE
CVE-2026-9210
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.