High severity · published Feb 24, 2026
CVE-2026-23678
Binardat 10G08-0800GSM Network Switch Traceroute CLI Command Injection
8.8
CVSS
1.4%
EPSS
No
On KEV
Description
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerability in the traceroute diagnostic function of the affected device web management interface. By injecting the %1a character into the hostname parameter, an authenticated attacker with access to the web interface can execute arbitrary CLI commands on the device.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
1N
10G08-0800GSM Network Switch · Binardat Ltd.
through V300SP10260209 · source: vendor
1F
10g08-0800gsm Firmware · Binardat
through V300SP10260209 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-23678
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-23678
Product
https://www.binardat.com/products/8-port-10-gigabit-sfp-managed-switch,-support-1g-sfp-and-10g-sfp-module,-160gbps-bandwidth,-l3-web-managed,-metal-fanless-fiber-binardat-network-switch
Third Party Advisory
https://www.vulncheck.com/advisories/binardat-10g08-0800gsm-network-switch-traceroute-cli-command-injection
More from 10G08-0800GSM Network Switch
9.8
CVE-2026-27507
Binardat 10G08-0800GSM Network Switch Hard-coded Credentials
9.1
CVE-2026-27515
Binardat 10G08-0800GSM Network Switch Predictable Session Identifiers
7.5
CVE-2026-27521
Binardat 10G08-0800GSM Network Switch Missing Login Rate Limiting
7.5
CVE-2026-27520
Binardat 10G08-0800GSM Network Switch Base64-encoded Password Stored in Cookie
7.5
CVE-2026-27519
Binardat 10G08-0800GSM Network Switch Hard-coded RC4 Encryption Key