# CVE-2026-4827

## Summary

- **CVE ID:** CVE-2026-4827
- **Severity:** HIGH
- **CVSS Score:** 8.7 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N)
- **CWE:** CWE-331
- **Published:** May 12, 2026
- **Last Modified:** May 14, 2026

## Description

CWE‑331 Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.

## Affected Products

- Schneider Electric — Easergy MiCOM C264 (Versions D6.x all versions)
- Schneider Electric — Easergy MiCOM C264 (Versions D7.33 and prior)
- Schneider Electric — Easergy C5 (Version 1.1.17 and prior)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM P139 version prior to P139.678.700)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM P437 version prior to P437.678.700)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM P439 version prior to P439.678.700)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM P532 version prior to P532.678.700)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM P539 version prior to P539.678.700)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM P631 version prior to P631.678.700)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM P632 version prior to P632.678.700)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM P633 version prior to P633.678.700)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM P633 version P633.680.700 only)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM P634 version prior to P634.678.700)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM P634 version P634.680.700 only)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM P138 version prior to P138.677.700)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM P436 version prior to P436.677.701)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM P438 version prior to P438.677.701)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM P638 version prior to P638.677.700)
- Schneider Electric — Easergy MiCOM P30 (Easergy MiCOM C434 version prior to C434.679.700)
- Schneider Electric — Easergy MiCOM P40 (P_ 4_ _ _ _ _ G_ _ _ _ _ M)
- Schneider Electric — Easergy MiCOM P40 (P_ 4_ _ _ _ _ H_ _ _ _ _ M)
- Schneider Electric — Easergy MiCOM P40 (P_ 4_ _ _ _ _ L _ _ _ _ _ M)
- Schneider Electric — Easergy MiCOM P40 (P_ 4_ _ _ _ _ G_ _ _ _ _ L)
- Schneider Electric — Easergy MiCOM P40 (P_ 4_ _ _ _ _ H_ _ _ _ _ L)
- Schneider Electric — Easergy MiCOM P40 (P_ 4_ _ _ _ _ L _ _ _ _ _ L)
- Schneider Electric — EcoStruxure™ Power Automation System Gateway (EPAS-GTW) (Version 6.4.616.200.100 and prior)
- Schneider Electric — EcoStruxure Power Automation System User Interface (EPAS-UI) (Version 3.0.3 and prior)
- Schneider Electric — EcoStruxure™ Power Operation (Version 2022 CU6 and prior)
- Schneider Electric — EcoStruxure™ Power Operation (Version 2024 CU2 and prior)
- Schneider Electric — iPMFLS (Version 64.2025.0.13 and prior)
- Schneider Electric — PowerLogic™ P5 Protection Relay (V02.502.103 and prior)
- Schneider Electric — PowerLogic™ P7 Protection and Control Platform (V02.002.002 and prior)
- Schneider Electric — PowerLogic™ T300 (Version 2.9.4 and prior)
- Schneider Electric — PowerLogic™ T500 (Version 11.08.02 and prior)
- Schneider Electric — Saitel DP (Version 11.06.36 and prior)
- Schneider Electric — EasyLogic T150 (formerly Saitel DR) (Version 11.06.30 and prior)
- Schneider Electric — Easergy MiCOM C264 (Versions D6.x)
- Schneider Electric — Easergy MiCOM P30 (P139 version prior to P139.678.700)
- Schneider Electric — Easergy MiCOM P30 (P437 version prior to P437.678.700)
- Schneider Electric — Easergy MiCOM P30 (P439 version prior to P439.678.700)
- Schneider Electric — Easergy MiCOM P30 (P532 version prior to P532.678.700)
- Schneider Electric — Easergy MiCOM P30 (P539 version prior to P539.678.700)
- Schneider Electric — Easergy MiCOM P30 (P631 version prior to P631.678.700)
- Schneider Electric — Easergy MiCOM P30 (P632 version prior to P632.678.700)
- Schneider Electric — Easergy MiCOM P30 (P633 version prior to P633.678.700)
- Schneider Electric — Easergy MiCOM P30 (P634 version prior to P634.678.700)
- Schneider Electric — Easergy MiCOM P30 (P633 version P633.680.700 only)
- Schneider Electric — Easergy MiCOM P30 (P634 version P634.680.700 only)
- Schneider Electric — Easergy MiCOM P30 (P138 version prior to P138.677.700)
- Schneider Electric — Easergy MiCOM P30 (P436 version prior to P436.677.701)
- Schneider Electric — Easergy MiCOM P30 (P438 version prior to P438.677.701)
- Schneider Electric — Easergy MiCOM P30 (P638 version prior to P638.677.700)
- Schneider Electric — Easergy MiCOM P30 (C434 version prior to C434.679.700)
- Schneider Electric — Easergy MiCOM P40 (Series model numbers with Protocol Option bit as G, H or L and all firmware versions)
- Schneider Electric — EcoStruxure™ Power Automation System User Interface (EPAS-UI) (Version 3.0.3 and prior)

## References

- [CNA](https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-132-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-132-02.pdf)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.31%
- **EPSS Percentile:** 23.8

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._