A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). (CVE-2026-62645)
A critical vulnerability (CVE-2026-62645) exists in Reyrolle 7SR5 devices running all versions prior to V2.70. The flaw allows information exposure via the web interface that enables calculation of current and past session ID numbers. This weakness could permit an attacker to bypass authentication and gain unauthorized access to the device.
AI Analysis
Technical Summary
CVE-2026-62645 affects Reyrolle 7SR5 devices in all versions before V2.70. The vulnerability involves exposure of information through the web interface that can be used to compute session ID numbers, potentially allowing attackers to bypass authentication mechanisms and access the device without authorization. The CVSS v3.1 score is 9.8, indicating a critical severity with network attack vector, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation can lead to complete compromise of the affected device by bypassing authentication controls, resulting in unauthorized access with full control. This could impact confidentiality, integrity, and availability of the device and its managed systems.
Mitigation Recommendations
A fix is available in version V2.70 of Reyrolle 7SR5. Users should upgrade to V2.70 or later to remediate this vulnerability. No other mitigation guidance is provided; patching is the recommended action.
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). (CVE-2026-62645)
Description
A critical vulnerability (CVE-2026-62645) exists in Reyrolle 7SR5 devices running all versions prior to V2.70. The flaw allows information exposure via the web interface that enables calculation of current and past session ID numbers. This weakness could permit an attacker to bypass authentication and gain unauthorized access to the device.
CVSS v3.1
Score 9.8critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-62645 affects Reyrolle 7SR5 devices in all versions before V2.70. The vulnerability involves exposure of information through the web interface that can be used to compute session ID numbers, potentially allowing attackers to bypass authentication mechanisms and access the device without authorization. The CVSS v3.1 score is 9.8, indicating a critical severity with network attack vector, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation can lead to complete compromise of the affected device by bypassing authentication controls, resulting in unauthorized access with full control. This could impact confidentiality, integrity, and availability of the device and its managed systems.
Mitigation Recommendations
A fix is available in version V2.70 of Reyrolle 7SR5. Users should upgrade to V2.70 or later to remediate this vulnerability. No other mitigation guidance is provided; patching is the recommended action.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-fvvh-v2c5-rpg2
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-62645"]
- Ecosystems
- []
- Database Specific Severity
- CRITICAL
- Cvss Version
- 3.1
Threat ID: 6aa005a8acd9273b49ab464e
Added to database: 09/08/2026, 12:55:04 UTC
Last enriched: 09/08/2026, 12:59:33 UTC
Last updated: 09/08/2026, 14:51:59 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.