What is the CVSS score of CVE-2026-27519?

CVE-2026-27519 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of 10g08 0800gsm Firmware are affected by CVE-2026-27519?

Binardat 10G network switches running firmware V300SP10260209 and earlier contain a critical cryptographic weakness that allows attackers to decrypt sensitive configuration and credential data.

How to fix or mitigate CVE-2026-27519?

Within 24 hours: Identify all Binardat 10G08-0800GSM switches in production and document firmware versions; restrict administrative access to these devices to trusted networks only. Within 7 days: Implement network segmentation to isolate affected switches from untrusted segments; disable remote management interfaces if not operationally critical; audit access logs for suspicious activity. Within 30 days: Contact Binardat for patched firmware availability; plan firmware upgrade testing in non-production environment; execute upgrades on a rolling basis prioritizing internet-facing and critical infrastructure switches.

10g08 0800gsm Firmware CVE-2026-27519

HIGH

Use of Hard-coded Cryptographic Key (CWE-321)

2026-02-24 disclosure@vulncheck.com

Information Disclosure 10g08 0800gsm Firmware Binardat

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 24, 2026 - 16:24 nvd

HIGH 7.5

DescriptionCVE.org

Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript. Because the key is static and exposed, an attacker can decrypt protected values and defeat confidentiality protections.

AnalysisAI

Binardat 10G08-0800GSM network switches version V300SP10260209 and earlier expose a hardcoded RC4 encryption key in client-side JavaScript, allowing unauthenticated remote attackers to decrypt sensitive configuration data and compromise network confidentiality. The static key weakness eliminates the intended cryptographic protection for protected values transmitted to and from the device.

Technical ContextAI

Classified as CWE-321 (Use of Hard-coded Cryptographic Key). Affects 10G08-0800Gsm Firmware. Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript. Because the key is static and exposed, an attacker can decrypt protected values and defeat confidentiality protections.