What is the CVSS score of CVE-2026-27507?

CVE-2026-27507 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of 10g08 0800gsm Firmware are affected by CVE-2026-27507?

Binardat 10G network switches in your environment contain hard-coded administrative credentials that cannot be removed, providing attackers with guaranteed full control over critical network…

How to fix or mitigate CVE-2026-27507?

Within 24 hours: Inventory all Binardat 10G08-0800GSM switches and identify those running V300SP10260209 or earlier; immediately isolate affected devices from untrusted network segments. Within 7 days: Implement network access controls restricting management access to these devices to authorized personnel only via jump hosts or VPNs; disable remote management protocols (SSH, HTTPS) if not operationally required. Within 30 days: Contact Binardat for patched firmware availability and develop a replacement or upgrade plan; escalate to executive leadership if devices cannot be patched or replaced within 90 days.

10g08 0800gsm Firmware CVE-2026-27507

CRITICAL

Use of Hard-coded Credentials (CWE-798)

2026-02-24 disclosure@vulncheck.com

Authentication Bypass 10g08 0800gsm Firmware Binardat

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 24, 2026 - 16:24 nvd

CRITICAL 9.8

DescriptionCVE.org

Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain hard-coded administrative credentials that cannot be changed by users. Knowledge of these credentials allows full administrative access to the device.

AnalysisAI

Hardcoded admin credentials in Binardat 10G08-0800GSM network switch firmware V300SP10260209 and prior. Known credentials provide full administrative access.