What is CVE-2026-27517?

CVE-2026-27517 is a medium-severity vulnerability in Binardat 10g08-0800gsm, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-02-24.

How severe is CVE-2026-27517?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Binardat 10g08-0800gsm

CVE-2026-27517

Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior reflect unsanitized user input in the web interface, allowing an attacker to inject and execute arbitrary JavaScript in the context of an authenticated user.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.001 (3.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Binardat 10g08-0800gsm
Binardat 10g08-0800gsm_firmware
Binardat Ltd. 10g08-0800gsm Network Switch — versions 0

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

disclosure@vulncheck.com (Product, product)
disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2026-27517?: CVE-2026-27517 is a medium-severity vulnerability in Binardat 10g08-0800gsm, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-02-24.
How severe is CVE-2026-27517?: Medium severity. CVSS v3 base score is 6.1 out of 10.