Search: CVE-2026-41020

CVE-2026-41020 is an authentication bypass vulnerability in Eaton easyE4 devices caused by the use of a static nonce during authentication. This flaw allows an unauthenticated attacker who has captured valid authentication traffic to replay it and gain unauthorized access to the device. The vulnerability affects versions prior to 2.46. A fix is available in version 2.46. The vulnerability has a high severity rating with a CVSS score of 7.5.