CVE-2026-23678Disclosure(binardat / 10g08-0800gsm)

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerability in the traceroute diagnostic function of the affected device web management interface. By injecting the %1a character into the hostname parameter, an authenticated attacker with access to the web interface can execute arbitrary CLI commands on the device.

binardat CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-traceroute-cli-command-injection

Other references

https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

10g08-0800gsm
10g08-0800gsm_firmware

Threat summary

6 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 6 signals
Disclosure: 6 classified signals
Peaked 2d ago at 4 mentions (2026-02-24); latest day: 1
6 total mentions across 3 days

Affected systems

Vendors

binardat

Products

10g08-0800gsm10g08-0800gsm_firmware

1 version affected across 2 products

Deep dive

Activity timeline6 mentions / 3d

Signal classification1 categories

Disclosure

6100.0%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-24	4	Disclosure4
2026-02-25	1	Disclosure1
2026-03-01	1	Disclosure1

Full discourse6 posts

CRAC Learning - Tech@cracbot221d
Disclosure
CVE-2026-23678 (CVSS:8.7, HIGH) is Analyzed. Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerabilit..https://nvd.nist.gov/vuln/detail/CVE-2026-23678 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces a high‑severity command injection vulnerability (CVE‑2026‑23678) in Binardat 10G08‑0800GSM switch firmware, citing its CVSS score, but provides no PoC, exploit, or mitigation details.
0000030
173 followersView on X
CVE@CVEnew225d
Disclosure
CVE-2026-23678 Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerability in the traceroute diagnostic function of the… https://www.cve.org/CVERecord?id=CVE-2026-23678
Post summary
CVE-2026-23678 exposes a command injection flaw in the traceroute diagnostic function of Binardat 10G08-0800GSM network switch firmware V300SP10260209 and earlier.
00000152
56.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds226d
Disclosure
CVE-2026-23678 Command Injection in Binardat 10G08-0800GSM Network Switch Web Management Interface https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23678
Post summary
A command injection vulnerability (CVE-2026-23678) was disclosed for the Binardat 10G08-0800GSM network switch web interface, with no PoC, exploit, patch, or active exploitation details provided.
0000036
4.0K followersView on X
CVEFind.com@CveFindCom226d
Disclosure
[CVE-2026-23678: HIGH] Critical vulnerability in Binardat 10G08-0800GSM switch firmware V300SP10260209 and earlier allows command injection via traceroute function, enabling attackers to run unauthorized com...#cve,CVE-2026-23678,#cybersecurity https://cvefind.com/CVE-2026-23678
Post summary
The post announces a high‑severity command injection flaw in Binardat switch firmware, but provides no evidence of exploitation or mitigation.
0000050
584 followersView on X
CVETodo@CveTodo226d
Disclosure
**CVE-2026-23678** pertains to a command injection vulnerability present in the firmware of Binardat 10G08-0800GSM network switches, specifically in the traceroute diagnostic function accessible via the device’s web management interface. The flaw allows an authenticated attacker to execute arbitrary CLI commands on the device by injecting malicious payloads into the hostname parameter of the traceroute feature, exploiting improper input validation. #Cybersecurity #CVE #HighSeverity #SecurityAlert #PrivilegeEscalation #Apple https://cvetodo.com/cve/CVE-2026-23678
Post summary
The post discloses a command injection vulnerability in Binardat 10G08-0800GSM switches that lets authenticated attackers execute arbitrary CLI commands through the web interface’s traceroute function.
0000040
20 followersView on X
The Hacker Wire@TheHackerWire226d
Disclosure
🟠 CVE-2026-23678 - High Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerability in the traceroute diagnostic function of the affected device web ma... https://www.thehackerwire.com/vulnerability/CVE-2026-23678/ https://t.co/V7rej4b64b
Post summary
The post announces a command injection vulnerability (CVE-2026-23678) affecting Binardat 10G08-0800GSM switches with firmware V300SP10260209 and earlier, providing a link for further details.
0000043
115 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	binardat	10g08-0800gsm	-	-	-
OS	binardat	10g08-0800gsm_firmware	-	-	-

Explore more

Back to dashboard binardat CVEs 10g08-0800gsm vulnerabilities

What researchers are saying

CVE-2026-23678

CVETodo[verified]@CveTodoDisclosure

The post discloses a command injection vulnerability in Binardat 10G08-0800GSM switches that lets authenticated attackers execute arbitrary CLI commands through the web interface’s traceroute function.

CRAC Learning - Tech@cracbotDisclosure

The post announces a high‑severity command injection vulnerability (CVE‑2026‑23678) in Binardat 10G08‑0800GSM switch firmware, citing its CVSS score, but provides no PoC, exploit, or mitigation details.

CVE@CVEnewDisclosure

CVE-2026-23678 exposes a command injection flaw in the traceroute diagnostic function of Binardat 10G08-0800GSM network switch firmware V300SP10260209 and earlier.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A command injection vulnerability (CVE-2026-23678) was disclosed for the Binardat 10G08-0800GSM network switch web interface, with no PoC, exploit, patch, or active exploitation details provided.

CVEFind.com@CveFindComDisclosure

The post announces a high‑severity command injection flaw in Binardat switch firmware, but provides no evidence of exploitation or mitigation.

The Hacker Wire@TheHackerWireDisclosure

The post announces a command injection vulnerability (CVE-2026-23678) affecting Binardat 10G08-0800GSM switches with firmware V300SP10260209 and earlier, providing a link for further details.