CVE-2026-27519

CVE-2026-27519 describes a critical vulnerability in Binardat 10G08-0800GSM network switch firmware versions V300SP10260209 and prior. The flaw stems from the use of RC4 encryption with a hard-coded, exposed key within client-side JavaScript, allowing an attacker to decrypt protected values and compromise confidentiality. Rated 7.5 HIGH on CVSS, this vulnerability has a low attack complexity and requires no privileges or user interaction, enabling remote attackers to achieve high confidentiality impact. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules or proof-of-concept code, though it has received minimal community discussion.