Vulnerabilities

CVSS

7.5 High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Risk score

60.0

Published

2026-05-12

Status

Analyzed

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials.

Weaknesses

CWE-1188

Coverage 1

vulnerability

Schneider Electric EcoStruxure Panel Server

Schneider Electric has identified a vulnerability in its EcoStruxure Panel Server product line, specifically versions prior to 002.006.000. This vulnerability, classified as CWE-1188, allows for potential unauthorized au…

CISA Advisories · Jun 9, 2026 High

CVE-2026-6866FRcwe-1188firmwareauthentication

All articles mentioning it

Advisories and references

• download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-132-04&p_e...