CVE-2026-89025: Hirschmann HiOS Switch Platform DoS via Malformed HTTP Request
Belden · Hirschmann HiOS Switch Platform
Vendor fix available · Affected: Belden Hirschmann HiOS Switch Platform · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 56% of scored CVEs
DescriptionCVE.org
Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTP(S) content. A remote unauthenticated attacker can send a specially crafted HTTP(S) request to a specific endpoint that is processed incorrectly, causing the device to perform an unintended reboot and resulting in a temporary denial-of-service condition. This vulnerability has been addressed in versions 07.1.12, 08.7.10, 09.0.13, 09.3.03, 10.3.08, and 10.5.00.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Belden · Hirschmann HiOS Switch Platformfrom 07.0.0 up to and including 07.1.11; from 08.0.0 up to and including 08.7.09; from 09.0.00 up to and including 09.0.12; from 09.3.00 up to and including 09.3.02; from 10.0.0 up to and including 10.3.07; 10.4.00 and 1 more
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Belden
- Published
- September 2026
CoverageNo articles yet
No CyberSIXT article names CVE-2026-89025 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.