Vulnerability · Published Sep 8, 2026 · Assigned by siemens
CVE-2026-62646
High 7.4
In plain English
A high-severity security flaw in Reyrolle 7SR5 from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Official description
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an algorithm with insufficient randomness, resulting in a token with low entropy that can be predicted or brute-forced within a feasible number of attempts. This could allow an unauthenticated remote attacker to derive valid session identifiers and bypass authentication.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Reyrolle 7SR5 | 0 – before V2.70 |
Weakness: CWE-331 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N