CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Java. Exploitation may require the attacker to be authenticated.
CVE
CVE-2026-27756
Severity
MEDIUM
CVSS
6.1
EPSS
0.15%
Java
Original NVD Description
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting vulnerability in the management interface where user input is not properly encoded before output. Attackers can craft malicious URLs that execute arbitrary JavaScript in the web interface when visited by authenticated users.
Related CVEs
Other vulnerabilities affecting the same vendor(s)