HarborGuard / CVE
Back to search
HIGHCVE-2026-6866Published Modified CNA schneider

CVE-2026-6866: Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials.

Metrics

CVSS v4.0
8.2
Severity
HIGH
Fixed in
Affected Products
1
Affected packages
  • Schneider Electric / EcoStruxure™ Panel Server
    Versions 002.005.000 and prior
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N