CVE-2026-27757

🗓️ 27 Feb 2026 18:11:05Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 5 Views

Authenticated users can change passwords without the current password on SODOLA SL902-SWTGW124AS firmware up to 200.1.20.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-27757	27 Feb 202618:11	–	attackerkb
Circl	CVE-2026-27757	4 Mar 202601:40	–	circl
CNNVD	SODOLA SL902-SWTGW124AS 安全漏洞	27 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-27757 SODOLA SL902-SWTGW124AS <= 200.1.20 Unverified Password Change	27 Feb 202618:11	–	cvelist
EUVD	EUVD-2026-9047	27 Feb 202621:31	–	euvd
NVD	CVE-2026-27757	27 Feb 202619:16	–	nvd
Positive Technologies	PT-2026-22375	27 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-27757	28 Feb 202619:45	–	redhatcve
Vulnrichment	CVE-2026-27757 SODOLA SL902-SWTGW124AS <= 200.1.20 Unverified Password Change	27 Feb 202618:11	–	vulnrichment

NVD

Vulners

CNA

Node

sodola-network sl902-swtgw124as_firmwareRange≤200.1.20

AND

sodola-network sl902-swtgw124asMatch-

[
  {
    "defaultStatus": "unknown",
    "product": "SODOLA SL902-SWTGW124AS",
    "vendor": "Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks)",
    "versions": [
      {
        "lessThanOrEqual": "200.1.20",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/sodola-sl902-swtgw124as-unverified-password-change
sodola-network	www.sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch

17 Jun 2026 10:27Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.1 - 7.2

CVSS 47.1

EPSS0.00252

SSVC

CWE-620