CVE-2026-27515Disclosure(binardat / 10g08-0800gsm)

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session identifiers in the web management interface. An attacker can guess valid session IDs and hijack authenticated sessions.

binardat CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-predictable-session-identifiers

Other references

https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch

Weakness type (CWE)

CWE-330

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

10g08-0800gsm
10g08-0800gsm_firmware

Threat summary

6 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 6 signals
Disclosure: 6 classified signals
Peaked 2d ago at 4 mentions (2026-02-24); latest day: 1
6 total mentions across 3 days

Affected systems

Vendors

binardat

Products

10g08-0800gsm10g08-0800gsm_firmware

1 version affected across 2 products

Deep dive

Activity timeline6 mentions / 3d

Signal classification1 categories

Disclosure

6100.0%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-24	4	Disclosure4
2026-02-25	1	Disclosure1
2026-03-01	1	Disclosure1

Full discourse6 posts

CRAC Learning - Tech@cracbot224d
Disclosure
CVE-2026-27515 (CVSS:9.3, CRITICAL) is Analyzed. Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session ide..https://nvd.nist.gov/vuln/detail/CVE-2026-27515 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet references CVE‑2026‑27515, noting its critical CVSS score and that older Binardat switch firmware versions generate predictable session IDs, but it does not provide PoC, exploit code, or patch details.
0000035
173 followersView on X
CVE@CVEnew228d
Disclosure
CVE-2026-27515 Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session identifiers in the web management interface. An a… https://www.cve.org/CVERecord?id=CVE-2026-27515
Post summary
Binardat 10G08-0800GSM network switches with firmware before V300SP10260209 generate predictable numeric session identifiers in the web management interface, exposing a session ID prediction vulnerability.
00000163
56.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds229d
Disclosure
CVE-2026-27515 Session Hijacking Vulnerability in Binardat 10G08-0800GSM Network Switch Firmware https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27515
Post summary
A session hijacking vulnerability (CVE-2026-27515) has been disclosed for Binardat 10G08-0800GSM network switch firmware; no PoC, exploit, patch, or active exploitation details are provided.
0000045
4.0K followersView on X
The Hacker Wire@TheHackerWire229d
Disclosure
🔴 CVE-2026-27515 - Critical Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session identifiers in the web management interface. An attacker can guess va... https://www.thehackerwire.com/vulnerability/CVE-2026-27515/ https://t.co/YWRJiczuwI
Post summary
The post announces CVE-2026-27515, highlighting that older Binardat switch firmware generates predictable session IDs in the web interface, enabling attackers to guess them.
0000061
115 followersView on X
CVETodo@CveTodo229d
Disclosure
CVE-2026-27515 pertains to the Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209. The core issue is that the web management interface generates **predictable numeric session identifiers**. This predictability allows an attacker to **guess valid session IDs**, enabling **session hijacking**. #Cybersecurity #CVE #CriticalCVE #CriticalVulnerability https://cvetodo.com/cve/CVE-2026-27515
Post summary
The post announces CVE-2026-27515, detailing that Binardat switch firmware uses predictable session IDs, enabling session hijacking.
0000043
20 followersView on X
CVEFind.com@CveFindCom229d
Disclosure
[CVE-2026-27515: CRITICAL] Vulnerable Binardat 10G08-0800GSM network switch firmware allows attackers to hijack authenticated sessions by predicting numeric session identifiers in the web interface.#cve,CVE-2026-27515,#cybersecurity https://cvefind.com/CVE-2026-27515
Post summary
The post announces CVE‑2026‑27515, a critical flaw in Binardat 10G08‑0800GSM switch firmware that allows attackers to hijack authenticated sessions by predicting numeric session identifiers in the web interface.
0000045
584 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	binardat	10g08-0800gsm	-	-	-
OS	binardat	10g08-0800gsm_firmware	-	-	-

Explore more

Back to dashboard binardat CVEs 10g08-0800gsm vulnerabilities

What researchers are saying

CVE-2026-27515

CVETodo[verified]@CveTodoDisclosure

The post announces CVE-2026-27515, detailing that Binardat switch firmware uses predictable session IDs, enabling session hijacking.

CRAC Learning - Tech@cracbotDisclosure

The tweet references CVE‑2026‑27515, noting its critical CVSS score and that older Binardat switch firmware versions generate predictable session IDs, but it does not provide PoC, exploit code, or patch details.

CVE@CVEnewDisclosure

Binardat 10G08-0800GSM network switches with firmware before V300SP10260209 generate predictable numeric session identifiers in the web management interface, exposing a session ID prediction vulnerability.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A session hijacking vulnerability (CVE-2026-27515) has been disclosed for Binardat 10G08-0800GSM network switch firmware; no PoC, exploit, patch, or active exploitation details are provided.

The Hacker Wire@TheHackerWireDisclosure

The post announces CVE-2026-27515, highlighting that older Binardat switch firmware generates predictable session IDs in the web interface, enabling attackers to guess them.

CVEFind.com@CveFindComDisclosure

The post announces CVE‑2026‑27515, a critical flaw in Binardat 10G08‑0800GSM switch firmware that allows attackers to hijack authenticated sessions by predicting numeric session identifiers in the web interface.