CVE-2026-27755 SODOLA SL902-SWTGW124AS <= 200.1.20 Predictable Session ID

What is CVE-2026-27755?

CVE-2026-27755 is a critical vulnerability in Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) SODOLA SL902-SWTGW124AS, published on 27 Feb 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a weak session identifier generation vulnerability that allows attackers to forge authenticated sessions by computing predictable MD5-based cookies. Attackers who know or guess valid credentials can calculate the session identifier offline and bypass authentication without completing the login flow, gaining unauthorized access to the device.

Weakness: CWE-330

Which versions are affected by CVE-2026-27755?

It affects 1 product.

Products include Sodola-Network Sl902-Swtgw124as Firmware.

How do I fix CVE-2026-27755?

No fix has been published for CVE-2026-27755 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-27755 being exploited?

There is no known exploitation of CVE-2026-27755 in the wild and no public exploit code.

Other vulnerabilities in Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) SODOLA SL902-SWTGW124AS

• CVE-2026-27751 SODOLA SL902-SWTGW124AS <= 200.1.20 Use of Default Credentials Critical 9.3
• CVE-2026-27752 SODOLA SL902-SWTGW124AS <= 200.1.20 Cleartext Credential Transmission High 8.2
• CVE-2026-27757 SODOLA SL902-SWTGW124AS <= 200.1.20 Unverified Password Change High 7.1
• CVE-2026-27753 SODOLA SL902-SWTGW124AS <= 200.1.20 Improper Login Rate Limiting Medium 6.9
• CVE-2026-27754 SODOLA SL902-SWTGW124AS <= 200.1.20 MD5 Session Token Generation Medium 6.9

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-pgqj-4vx9-9f56.