CVE-2026-27507
CriticalPublished
Binardat 10G08-0800GSM Network Switch Hard-coded Credentials
- Published
- Feb 24, 2026
- Updated
- Feb 27, 2026
- Assigning CNA
- VulnCheck
- Evidence observed
- Aug 25, 2026
Primary CVSS
9.3/ 10Critical
nvd · CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X0.6%
Low · next 30 days
- Percentile
- 44.8%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain hard-coded administrative credentials that cannot be changed by users. Knowledge of these credentials allows full administrative access to the device.
Sources
- CVE-2026-27507Research
Repository dedicated to CVE-2026-27507, providing details and analysis for this specific vulnerability.
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.