A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). (CVE-2026-62649)

CVE-2026-62649 affects Reyrolle 7SR5 devices running all versions before V2.70. The vulnerability arises because the embedded web server fails to limit or manage system resources when processing a large volume of concurrent HTTP requests. This flaw can be exploited remotely without authentication to cause the device to crash and reboot, resulting in a denial-of-service condition. The CVSS 3.1 base score is 7.5, reflecting a high severity impact on availability with no impact on confidentiality or integrity.

An unauthenticated remote attacker can cause a denial-of-service by overwhelming the device's web server with concurrent HTTP requests, leading to a crash and reboot of the device. This disrupts device availability but does not affect confidentiality or integrity.

A fixed version V2.70 or later addresses this vulnerability. Users should upgrade to version V2.70 or above to remediate the issue. No other mitigation or temporary workaround information is provided. Patch status is not explicitly confirmed by a vendor advisory in the provided data; therefore, verify with the vendor for official remediation guidance.