CVE-2026-27516 | THREATINT

Description

Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior expose user passwords in plaintext within the administrative interface and HTTP responses, allowing recovery of valid credentials.

PUBLISHED Reserved 2026-02-19 | Published 2026-02-24 | Updated 2026-03-02 | Assigner VulnCheck

HIGH: 8.6CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Problem types

CWE-201 Insertion of Sensitive Information Into Sent Data

CWE-317 Cleartext Storage of Sensitive Information in GUI

Product status

Default status

unaffected

Any version

affected

Credits

Kazuma Matsumoto, a security researcher at GMO Cybersecurity by IERAE, Inc. finder

References

www.binardat.com/...al-fanless-fiber-binardat-network-switch product

www.vulncheck.com/...work-switch-plaintext-password-exposure third-party-advisory

cve.org (CVE-2026-27516)

nvd.nist.gov (CVE-2026-27516)

Download JSON