CVE-2026-27756: SODOLA SL902-SWTGW124AS <= 200.1.20 Reflected XSS in Management Interface
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting vulnerability in the management interface where user input is not properly encoded before output. Attackers can craft malicious URLs that execute arbitrary JavaScript in the web interface when visited by authenticated users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27756?
CVE-2026-27756 is rated as a medium severity vulnerability due to the potential for reflected cross-site scripting attacks.
How do I fix CVE-2026-27756?
To fix CVE-2026-27756, upgrade the SODOLA SL902-SWTGW124AS firmware to a version later than 200.1.20 where the issue has been resolved.
Who is affected by CVE-2026-27756?
CVE-2026-27756 affects users of SODOLA SL902-SWTGW124AS firmware version 200.1.20 and earlier.
What kind of vulnerability is CVE-2026-27756?
CVE-2026-27756 is a reflected cross-site scripting (XSS) vulnerability in the management interface.
What are the potential impacts of CVE-2026-27756?
If exploited, CVE-2026-27756 could allow attackers to execute arbitrary scripts in the context of the user's browser.