What is the CVSS score of CVE-2026-27521?

CVE-2026-27521 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of 10g08 0800gsm Firmware are affected by CVE-2026-27521?

A HIGH severity vulnerability in 10G08-0800Gsm Firmware allows attackers to bypass authentication protections through excessive login attempts, potentially enabling unauthorized access to affected…

How to fix or mitigate CVE-2026-27521?

Within 24 hours: Inventory all systems running 10G08-0800Gsm Firmware and assess exposure; implement network segmentation to restrict access to affected devices. Within 7 days: Deploy compensating controls including rate limiting on authentication endpoints, enhanced monitoring for brute-force patterns, and credential rotation for administrative accounts. Within 30 days: Contact vendor for patch availability status and develop upgrade timeline; implement multi-factor authentication on affected systems where possible.

10g08 0800gsm Firmware CVE-2026-27521

HIGH

Improper Restriction of Excessive Authentication Attempts (CWE-307)

2026-02-24 disclosure@vulncheck.com

Authentication Bypass 10g08 0800gsm Firmware Binardat

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 24, 2026 - 16:24 nvd

HIGH 7.5

DescriptionCVE.org

Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior do not implement rate limiting or account lockout on failed login attempts, enabling brute-force attacks against user credentials.

AnalysisAI

10G08-0800Gsm Firmware is affected by improper restriction of excessive authentication attempts (CVSS 7.5).

Technical ContextAI

This vulnerability (CWE-307: Improper Restriction of Excessive Authentication Attempts) affects 10G08-0800Gsm Firmware. Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior do not implement rate limiting or account lockout on failed login attempts, enabling brute-force attacks against user credentials.