CVE-2026-4827CWE-331

Insufficient Entropy vulnerability on Multiple Products

High · published May 12, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
36.0
In the wild
Unconfirmed
What it is

CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00428 · 36.0th percentile
Weakness
CWE-331 · Insufficient Entropy
Published
2026-05-12T12:24Z
EPSS history
Timeline
  • 12 MAY 12:24Z
    Insufficient Entropy vulnerability on Multiple Products
    cvelistv5