CVE-2026-27756 — SODOLA SL902-SWTGW124AS <= 200.1.20 Reflected XSS in Management Interface
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting vulnerability in the management interface where user input is not properly en…
Published: 2026-02-27 · CVSS: 5.1 · CVSS 4.0
SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting vulnerability in the management interface where user input is not properly encoded before output. Attackers can craft malicious URLs that execute arbitrary JavaScript in the web interface when visited by authenticated users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7