CVE-2026-23678: Binardat 10g08-0800gsm Firmware

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerability in the traceroute diagnostic function of the affected device web management interface. By injecting the %1a character into the hostname parameter, an authenticated attacker with access to the web interface can execute arbitrary CLI commands on the device.

Affected products

• Binardat 10g08-0800gsm Firmware: up to and including V300SP10260209

Published 2026-02-24. Last modified 2026-06-17.