CVE-2026-4827

CWE‑331 Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.

Scoring

Severity

HIGH

CVSS base score

8.7

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

EPSS probability

0.31%

CWE

CWE-331

Published

2026-05-12

Last modified

2026-05-14

Affected products

• Schneider Electric Easergy MiCOM C264
• Schneider Electric Easergy MiCOM C264
• Schneider Electric Easergy C5
• Schneider Electric Easergy MiCOM P30
• Schneider Electric Easergy MiCOM P30
• Schneider Electric Easergy MiCOM P30
• Schneider Electric Easergy MiCOM P30
• Schneider Electric Easergy MiCOM P30

Weakness type

• CWE-331

Related vulnerabilities

• CVE-2026-80171 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
• CVE-2026-62646 — A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier...
• CVE-2026-27490 — Combodo iTop: Weak secret generation for inline image
• CVE-2026-4936 — Power System Insufficient Entropy
• CVE-2026-4937 — Power System Insufficient Entropy
• CVE-2026-19906 — pkp pkp-lib API Key Generation APIProfileForm.php setData entropy
• CVE-2026-19748 — Tenda CH7 Kylin Web Service CWebSessionManager_ParseSession entropy
• CVE-2026-71851 — crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain

Markdown version · Browse all CVEs