LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →
Home / Vulnerability Intelligence / CVE-2026-27507

CVE-2026-27507 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: February 25, 2026

Binardat 10G08-0800GSM - Hardcoded Credentials

Published: February 24, 2026Updated: February 25, 2026Remote Exploitable

Overview

Binardat 10G08-0800GSM network switch firmware V300SP10260209 and prior contains hardcoded administrative credentials, letting attackers with knowledge of these credentials gain full administrative access, exploit requires knowledge of hardcoded credentials.

Severity & Score

Severity: Critical
CVSS Score: 9.8
EPSS Score: 0.0%(Probability of exploitation in next 30 days)

Impact

Attackers with hardcoded credentials can gain full administrative access, compromising device control and security.

Mitigation

Update to the latest firmware version that removes hardcoded credentials.

Social Media Activity(2 posts)

TheHackerWire
TheHackerWire
@thehackerwire
Feb 24, 2026

šŸ”“ CVE-2026-27507 - Critical (9.8) Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain hard-coded administrative credentials that cannot be changed by users. Knowledge of these credentials allows full administrative access to the device. šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-27507/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Feb 24, 2026

šŸ”“ CVE-2026-27507 - Critical (9.8) Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain hard-coded administrative credentials that cannot be changed by users. Knowledge of these credentials allows full administrative access to the device. šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-27507/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Details

CVE ID
CVE-2026-27507
Severity
Critical
CVSS Score
9.8
Type
hardcoded_credentials
Status
confirmed
EPSS
0.0%
Social Posts
2

CWE

  • CWE-798

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.0%Probability of exploitation in the next 30 days