Vulnerability · Published Sep 8, 2026 · Assigned by siemens
CVE-2026-62650
High 8.8
In plain English
A high-severity authentication bypass in Reyrolle 7SR5 from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).
Official description
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the web-based management interface are not properly enforced, allowing role-based access control (RBAC) restrictions to be bypassed through manipulation of request data. This could allow an authenticated, low-privileged remote attacker to escalate privileges to an administrative level.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Reyrolle 7SR5 | 0 – before V2.70 |
Weakness: CWE-288 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H