CVE-2026-27755

critical · 9.3

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers to forge authenticated sessions by computing predictable MD5-based cookies. Attackers who know or guess valid credentials can calculate the session identifier offline and bypass authentication without completing the login flow, gaining unauthorized access to the device.

9.3

CVSS

0.4%

EPSS (exploit prob.)

34th

EPSS percentile

2026-02-27

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-330

Affected products

Vendor	Product	Affected versions
sodola-network	sl902-swtgw124as_firmware	<= 200.1.20
sodola-network	sl902-swtgw124as	all versions

Check a specific version with /api/v1/cve/match.

References

https://www.sodola-network.com/products/sodola-6-port-2-5g-easy-web-managed-switch-4-x-2-5g-base-t-ports-2-x-10g-sfp-static-aggregation-qos-vlan-igmp-2-5gb-network-home-lab-switch
https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-predictable-session-id

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-27755