XSS in Binardat 10g08-0800gsm
CVE-2026-27517
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior reflect unsanitized user input in the web interface, allowing an attacker to inject and execute arbitrary JavaScript in the context of an authenticated user.
Vulnerability class: XSS (Cross-Site Scripting)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
EPSS exploit prediction
EPSS: 0.003 (16.0th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 16th percentile — 16.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.003 · change: +0.001
Affected products
Weakness classification (CWE)
References
- www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-… (Product, product)
- www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-xss (Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2026-27517?
- CVE-2026-27517 is a medium-severity vulnerability in Binardat 10g08-0800gsm, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-02-24.
- How severe is CVE-2026-27517?
- Medium severity. CVSS v3 base score is 6.1 out of 10.