{ "schemaVersion": 1, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "record": { "id": "CVE-2026-4827", "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-4827", "idYear": 2026, "status": "PUBLISHED", "publishedAt": "2026-05-12T12:24:22.928Z", "updatedAt": "2026-05-14T17:38:38.647Z", "importedAt": "2026-10-24T01:58:14.884Z", "snapshot": { "id": "cve_2026-10-24_midnight_baseline", "at": "2026-10-24T00:00:00.000Z", "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z" }, "facts": { "title": "Insufficient Entropy vulnerability on Multiple Products", "summary": "CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.", "affected": [ { "vendor": "Schneider Electric", "product": "Easergy MiCOM C264", "defaultStatus": "unaffected", "versions": [ { "version": "Versions D6.x", "status": "affected" }, { "version": "Versions D7.33 and prior", "status": "affected" } ] }, { "vendor": "Schneider Electric", "product": "Easergy C5", "defaultStatus": "unaffected", "versions": [ { "version": "Version 1.1.17 and prior", "status": "affected" } ] }, { "vendor": "Schneider Electric", "product": "Easergy MiCOM P30", "defaultStatus": "unaffected", "versions": [ { "version": "P139 version prior to P139.678.700", "status": "affected" }, { "version": "P437 version prior to P437.678.700", "status": "affected" }, { "version": "P439 version prior to P439.678.700", "status": "affected" }, { "version": "P532 version prior to P532.678.700", "status": "affected" }, { "version": "P539 version prior to P539.678.700", "status": "affected" }, { "version": "P631 version prior to P631.678.700", "status": "affected" }, { "version": "P632 version prior to P632.678.700", "status": "affected" }, { "version": "P633 version prior to P633.678.700", "status": "affected" }, { "version": "P634 version prior to P634.678.700", "status": "affected" }, { "version": "P633 version P633.680.700 only", "status": "affected" }, { "version": "P634 version P634.680.700 only", "status": "affected" }, { "version": "P138 version prior to P138.677.700", "status": "affected" }, { "version": "P436 version prior to P436.677.701", "status": "affected" }, { "version": "P438 version prior to P438.677.701", "status": "affected" }, { "version": "P638 version prior to P638.677.700", "status": "affected" }, { "version": "C434 version prior to C434.679.700", "status": "affected" } ] }, { "vendor": "Schneider Electric", "product": "Easergy MiCOM P40", "defaultStatus": "unaffected", "versions": [ { "version": "Series model numbers with Protocol Option bit as G, H or L and all firmware versions", "status": "affected" } ] }, { "vendor": "Schneider Electric", "product": "EcoStruxure™ Power Automation System Gateway (EPAS-GTW)", "defaultStatus": "unaffected", "versions": [ { "version": "Version 6.4.616.200.100 and prior", "status": "affected" } ] }, { "vendor": "Schneider Electric", "product": "EcoStruxure™ Power Automation System User Interface (EPAS-UI)", "defaultStatus": "unaffected", "versions": [ { "version": "Version 3.0.3 and prior", "status": "affected" } ] }, { "vendor": "Schneider Electric", "product": "EcoStruxure™ Power Operation", "defaultStatus": "unaffected", "versions": [ { "version": "Version 2022 CU6 and prior", "status": "affected" }, { "version": "Version 2024 CU2 and prior", "status": "affected" } ] }, { "vendor": "Schneider Electric", "product": "iPMFLS", "defaultStatus": "unaffected", "versions": [ { "version": "Version 64.2025.0.13 and prior", "status": "affected" } ] }, { "vendor": "Schneider Electric", "product": "PowerLogic™ P5 Protection Relay", "defaultStatus": "unaffected", "versions": [ { "version": "V02.502.103 and prior", "status": "affected" } ] }, { "vendor": "Schneider Electric", "product": "PowerLogic™ P7 Protection and Control Platform", "defaultStatus": "unaffected", "versions": [ { "version": "V02.002.002 and prior", "status": "affected" } ] }, { "vendor": "Schneider Electric", "product": "PowerLogic™ T300", "defaultStatus": "unaffected", "versions": [ { "version": "Version 2.9.4 and prior", "status": "affected" } ] }, { "vendor": "Schneider Electric", "product": "PowerLogic™ T500", "defaultStatus": "unaffected", "versions": [ { "version": "Version 11.08.02 and prior", "status": "affected" } ] }, { "vendor": "Schneider Electric", "product": "Saitel DP", "defaultStatus": "unaffected", "versions": [ { "version": "Version 11.06.36 and prior", "status": "affected" } ] }, { "vendor": "Schneider Electric", "product": "EasyLogic T150 (formerly Saitel DR)", "defaultStatus": "unaffected", "versions": [ { "version": "Version 11.06.30 and prior", "status": "affected" } ] } ] } } }