CVE-2026-62653 is a high-severity vulnerability affecting Reyrolle 7SR5 devices in all versions before V2.70. The issue arises from insufficient input validation over a proprietary communication protocol exposed only in a special firmware-update mode. This leads to a memory corruption condition (CWE-787) that could be exploited by an unauthenticated attacker with physical access to cause denial of service or arbitrary code execution.

Successful exploitation can result in a complete compromise of the affected device, including denial of service and arbitrary code execution. The attacker must have physical access and place the device into the firmware-update mode to exploit the vulnerability. There are no known exploits in the wild at this time.

A fixed version V2.70 or later addresses this vulnerability. Users should upgrade to Reyrolle 7SR5 version V2.70 or above to remediate this issue. Until then, restrict physical access to devices and avoid placing devices into firmware-update mode unless necessary.