CVE-2026-27515CWE-330

Binardat 10G08-0800GSM Network Switch Predictable Session Identifiers

Critical · published February 24, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session identifiers in the web management interface. An attacker can guess valid session IDs and hijack authenticated sessions.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00521 · 43.4th percentile
Weakness
CWE-330 · Use of Insufficiently Random Values
Published
2026-02-24T15:04Z
EPSS history
Timeline
  • 24 FEB 15:04Z
    Binardat 10G08-0800GSM Network Switch Predictable Session Identifiers
    cvelistv5