https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T20:12:22.840833+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-27757 CVE-2026-27757 — SODOLA SL902-SWTGW124AS <= 200.1.20 Unverified Password Change 2026-10-08T20:12:22.859642+00:00

Affected: Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) SODOLA SL902-SWTGW124AS

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain an authentication vulnerability that allows authenticated users to change account passwords without verifying the current password. Attackers who gain access to an authenticated session can modify credentials to maintain persistent access to the management interface.