What is the CVSS score of CVE-2026-27521?

CVE-2026-27521 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of 10g08 0800gsm Firmware are affected by CVE-2026-27521?

A HIGH severity vulnerability in 10G08-0800Gsm Firmware allows attackers to bypass authentication protections through excessive login attempts, potentially enabling unauthorized access to affected…

How to fix or mitigate CVE-2026-27521?

Within 24 hours: Inventory all systems running 10G08-0800Gsm Firmware and assess exposure; implement network segmentation to restrict access to affected devices. Within 7 days: Deploy compensating controls including rate limiting on authentication endpoints, enhanced monitoring for brute-force patterns, and credential rotation for administrative accounts. Within 30 days: Contact vendor for patch availability status and develop upgrade timeline; implement multi-factor authentication on affected systems where possible.

10g08 0800gsm Firmware CVE-2026-27521

HIGH

Improper Restriction of Excessive Authentication Attempts (CWE-307)

2026-02-24 disclosure@vulncheck.com

Authentication Bypass 10g08 0800gsm Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 24, 2026 - 16:24 nvd

HIGH 7.5

DescriptionCVE.org

Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior do not implement rate limiting or account lockout on failed login attempts, enabling brute-force attacks against user credentials.

AnalysisAI

10G08-0800Gsm Firmware is affected by improper restriction of excessive authentication attempts (CVSS 7.5).

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Scan network for Binardat switch

Exploit

Attempt multiple login credentials

Execution

Bypass authentication via brute force

Impact

Access management interface

Access

Scan network for Binardat switch

Exploit

Attempt multiple login credentials

Execution

Bypass authentication via brute force

Impact

Access management interface

Vulnerability AssessmentAI

Exploitation	Binardat 10G08-0800GSM network switch firmware version V300SP10260209 or prior with management interface exposed to network. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	CVSS 7.5 (HIGH). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	A remote attacker could exploit this vulnerability to compromise the affected system.
Remediation	Monitor vendor advisories for a patch. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: Inventory all systems running 10G08-0800Gsm Firmware and assess exposure; implement network segmentation to restrict access to affected devices. …

Threat intelligence, references, and detailed analysis are available after sign-in.