CVE-2026-62645

critical · 9.3

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web interface that can be used to calculate the current and past session ID numbers. This could allow an attacker to bypass the authentication and gain unauthorized access to the device.

9.3

CVSS

0.6%

EPSS (exploit prob.)

51st

EPSS percentile

2026-09-08

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-306

References

https://cert-portal.siemens.com/productcert/html/ssa-142885.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-62645