CVE-2026-27755 - SODOLA SL902-SWTGW124AS <= 200.1.20 predictable session id

CVE ID : CVE-2026-27755 Published : Feb. 27, 2026, 6:09 p.m. | 21 minutes ago Description : SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers to forge authenticated sessions by computing predictable MD5-based cookies. Attackers who know or guess valid credentials can calculate the session identifier offline and bypass authentication without completing the login flow, gaining unauthorized access to the device. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...