What is the CVSS score of CVE-2026-27507?

CVE-2026-27507 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of 10g08 0800gsm Firmware are affected by CVE-2026-27507?

Binardat 10G network switches in your environment contain hard-coded administrative credentials that cannot be removed, providing attackers with guaranteed full control over critical network…

How to fix or mitigate CVE-2026-27507?

Within 24 hours: Inventory all Binardat 10G08-0800GSM switches and identify those running V300SP10260209 or earlier; immediately isolate affected devices from untrusted network segments. Within 7 days: Implement network access controls restricting management access to these devices to authorized personnel only via jump hosts or VPNs; disable remote management protocols (SSH, HTTPS) if not operationally required. Within 30 days: Contact Binardat for patched firmware availability and develop a replacement or upgrade plan; escalate to executive leadership if devices cannot be patched or replaced within 90 days.

10g08 0800gsm Firmware CVE-2026-27507

CRITICAL

Use of Hard-coded Credentials (CWE-798)

2026-02-24 disclosure@vulncheck.com

Authentication Bypass 10g08 0800gsm Firmware

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 24, 2026 - 16:24 nvd

CRITICAL 9.8

DescriptionCVE.org

Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain hard-coded administrative credentials that cannot be changed by users. Knowledge of these credentials allows full administrative access to the device.

AnalysisAI

Hardcoded admin credentials in Binardat 10G08-0800GSM network switch firmware V300SP10260209 and prior. Known credentials provide full administrative access.

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Discover network switch IP address

Exploit

Connect via SSH/telnet

Execution

Authenticate with hard-coded credentials

Impact

Gain full administrative access

Access

Discover network switch IP address

Exploit

Connect via SSH/telnet

Execution

Authenticate with hard-coded credentials

Impact

Gain full administrative access

Vulnerability AssessmentAI

Exploitation	Binardat 10G08-0800GSM network switch firmware version V300SP10260209 or earlier with hard-coded administrative credentials enabled in default configuration. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	CVSS 9.8. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Attacker logs into switch with known hardcoded credentials, configures port mirroring for traffic interception, modifies VLAN settings.
Remediation	Update firmware. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: Inventory all Binardat 10G08-0800GSM switches and identify those running V300SP10260209 or earlier; immediately isolate affected devices from untrusted network segments. …

Threat intelligence, references, and detailed analysis are available after sign-in.