CVE-2026-27520CWE-312

Binardat 10G08-0800GSM Network Switch Base64-encoded Password Stored in Cookie

High · published February 24, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
23.2
In the wild
Unconfirmed
What it is

Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 store a user password in a client-side cookie as a Base64-encoded value accessible via the web interface. Because Base64 is reversible and provides no confidentiality, an attacker who can access the cookie value can recover the plaintext password.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00315 · 23.2th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2026-02-24T15:07Z
EPSS history
Timeline
  • 24 FEB 15:07Z
    Binardat 10G08-0800GSM Network Switch Base64-encoded Password Stored in Cookie
    cvelistv5