CVE-2026-27519
High
Description
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript. Because the key is static and exposed, an attacker can decrypt protected values and defeat confidentiality protections.
SeverityHigh
CVSS7.5
Exploit probability—
ProductBinardat 10g08-0800gsm Firmware
PublishedFeb 24, 2026
First seenFeb 24, 2026
Weakness typeCWE-321CWE-321CWE-327CWE-327
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| binardat 10g08-0800gsm_firmware | v ≤ V300SP10260209 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.