CVE-2026-62645CWE-306

CVE-2026-62645

Critical · published September 8, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
50.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web interface that can be used to calculate the current and past session ID numbers. This could allow an attacker to bypass the authentication and gain unauthorized access to the device.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
9.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00646 · 50.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-09-08T13:18Z
References (1)
https://cert-portal.siemens.com/productcert/html/ssa-142885.html · [email protected]
EPSS history
Timeline
  • 09 SEP 03:20Z
    EPSS moved — → 0%
    epss
  • 08 SEP 08:11Z
    A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70)
    cvelistv5