Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 hash function for session cookie generation, weakening session security. Attackers can exploit predictable session tokens combined with MD5's collision vulnerabilities to forge valid session cookies and gain unauthorized access to the device.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
CVE-2026-27754 Insecure Session Cookie Generation in SODOLA SL902-SWTGW124AS Firmware via MD5 Hashing https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27754
Post summary
The text discloses CVE-2026-27754, highlighting insecure session cookie generation due to MD5 hashing in SODOLA firmware, but provides no PoC, exploit, or patch information.
CVE-2026-27754 SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 hash function for session cookie generation, weakening session securit… https://www.cve.org/CVERecord?id=CVE-2026-27754
Post summary
The post announces CVE-2026-27754, noting that SODOLA SL902-SWTGW124AS firmware uses MD5 for session cookies, which weakens security. No exploit details, PoC, or patch information are provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | sodola-network | sl902-swtgw124as | - | - | - |
| OS | sodola-network | sl902-swtgw124as_firmware | - | - | - |