8.7

CVE-2026-89025: belden hirschmann hios switch platform

CVSS: 8.7v4.0HighAwaiting analysis
Published 15-09-2026Last modified 01-10-2026
Open JSON

Vulnerability summary

CVE-2026-89025 is a high (CVSS 8.7) vulnerability in belden hirschmann hios switch platform. EPSS estimates a 0.77% chance of exploitation in the next 30 days, higher than 54.8% of scored vulnerabilities.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.7/10
010
High · v4.0 (CVE.org)
EPSS score
0.77%
0%100%
Low · +0.35 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 15-09-2026
    PublishedVulnerability first disclosed.
  2. 01-10-2026
    Last modifiedVulnerability information updated.

Description

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTP(S) content. A remote unauthenticated attacker can send a specially crafted HTTP(S) request to a specific endpoint that is processed incorrectly, causing the device to perform an unintended reboot and resulting in a temporary denial-of-service condition. This vulnerability has been addressed in versions 07.1.12, 08.7.10, 09.0.13, 09.3.03, 10.3.08, and 10.5.00.

CVSS metrics

4 scores · 2 sources · 2 versions

EPSS trend

Probability

0.77%

Chance of exploitation in the next 30 days

Percentile

55%

Versus all other CVEs

30-day change

+0.35 pp

From 0.42% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.77%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Belden1 product
  • hirschmann hios switch platform≥ 07.0.0, ≤ 07.1.11 | ≥ 08.0.0, ≤ 08.7.09 | ≥ 09.0.00, ≤ 09.0.12 | ≥ 09.3.00, ≤ 09.3.02 | ≥ 10.0.0, ≤ 10.3.07 | 10.4.00 | 10.5.00

1 vendor · 1 product

References

2 links