CVE-2026-6866CWE-1188

Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server

High · published May 12, 2026

CVSS v4.0
8.2
EPSS
0%
Percentile
41.1
In the wild
Unconfirmed
What it is

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials.

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00488 · 41.1th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2026-05-12T13:59Z
EPSS history
Timeline
  • 12 MAY 13:59Z
    Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server
    cvelistv5