CVE-2026-6866
Last modified
CVE-2026-6866 is a high-severity vulnerability rated 8.2/10 on the CVSS scale. CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials.. EPSS estimates a 0.29% chance of exploitation in the next 30 days.
Description
CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Schneider-Electric | Ecostruxure Panel Server Pas400 Firmware | < 002.006.000 |
| Schneider-Electric | Ecostruxure Panel Server Pas600 Firmware | < 002.006.000 |
| Schneider-Electric | Ecostruxure Panel Server Pas600v2 Firmware | < 002.006.000 |
| Schneider-Electric | Ecostruxure Panel Server Pas800 Firmware | < 002.006.000 |
| Schneider-Electric | Ecostruxure Panel Server Pas800v2 Firmware | < 002.006.000 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-6866?
How severe is CVE-2026-6866?
How do I fix CVE-2026-6866?
Are you affected by CVE-2026-6866?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST