CVE-2026-27758: SODOLA SL902-SWTGW124AS <= 200.1.20 Missing CSRF Protections
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a cross-site request forgery vulnerability in its management interface that allows attackers to induce authenticated users into submitting forged requests. Attackers can craft malicious requests that execute unauthorized configuration or administrative actions with the victim's privileges when the authenticated user visits a malicious webpage.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27758?
CVE-2026-27758 is considered a medium severity vulnerability due to its cross-site request forgery (CSRF) nature, which can allow unauthorized actions to be performed by authenticated users.
How do I fix CVE-2026-27758?
To fix CVE-2026-27758, update the SODOLA SL902-SWTGW124AS firmware to a version that includes CSRF protections.
Who is affected by CVE-2026-27758?
CVE-2026-27758 affects SODOLA SL902-SWTGW124AS firmware versions up to and including 200.1.20.
What type of vulnerability is CVE-2026-27758?
CVE-2026-27758 is a cross-site request forgery (CSRF) vulnerability that can exploit the management interface of the affected device.
What are the potential impacts of CVE-2026-27758?
The potential impacts of CVE-2026-27758 include unauthorized actions being performed on behalf of authenticated users, compromising the security of the management interface.