CVE-2026-27758CWE-352

SODOLA SL902-SWTGW124AS <= 200.1.20 Missing CSRF Protections

Medium · published February 27, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a cross-site request forgery vulnerability in its management interface that allows attackers to induce authenticated users into submitting forged requests. Attackers can craft malicious requests that execute unauthorized configuration or administrative actions with the victim's privileges when the authenticated user visits a malicious webpage.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00163 · 5.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2026-02-27T18:11Z
EPSS history
Timeline
  • 27 FEB 18:11Z
    SODOLA SL902-SWTGW124AS <= 200.1.20 Missing CSRF Protections
    cvelistv5