CVE-2026-62646

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an algorithm with insufficient randomness, resulting in a token with low entropy that can be predicted or brute-forced within a feasible number of attempts. This could allow an unauthenticated remote attacker to derive valid session identifiers and bypass authentication.

• CWE-331

• https://cert-portal.siemens.com/productcert/html/ssa-142885.html

Published

Sep 8, 2026

Last Modified

Sep 10, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-62640Vulnerability in the Oracle Reports Developer product of Ora…9.8
• CVE-2026-62641In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, t…6.5
• CVE-2026-62642In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, a…6.5
• CVE-2026-62643In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, i…10
• CVE-2026-62644In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, t…9.8
• CVE-2026-62645A vulnerability has been identified in Reyrolle 7SR5 (All ve…9.8
• CVE-2026-62647A vulnerability has been identified in Reyrolle 7SR5 (All ve…7.4
• CVE-2026-62648A vulnerability has been identified in Reyrolle 7SR5 (All ve…7.5
• CVE-2026-62649A vulnerability has been identified in Reyrolle 7SR5 (All ve…7.5
• CVE-2026-6265Insecure preserved inherited permissions vulnerability in Ce…8.8
• CVE-2026-62650A vulnerability has been identified in Reyrolle 7SR5 (All ve…8.8
• CVE-2026-62652A vulnerability has been identified in Reyrolle 7SR5 (All ve…5.3