PT-2026-40017 · Schneider Electric · Easergy C5+13

Published 2026-05-12 · Updated 2026-05-14 · CVE-2026-4827

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description Insufficient Entropy occurs when the randomness used in session-management protections is inadequate, potentially allowing a network-based attacker to gain unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-331

Related Identifiers

CVE-2026-4827

Affected Products

Easergy C5

Easergy Micom C264

Easergy Micom P30

Easergy Micom P40

Easylogic T150

Ecostruxure Power Automation System User Interface

Ecostruxure™ Power Automation System Gateway

Ecostruxure Powerscada Operation

Powerlogic™ P5 Protection Relay

Powerlogic™ P7 Protection/Control Platform

Powerlogic™ T300

Powerlogic™ T500

Saitel Dp

Ipmfls

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-4827 · Security Note
• https://t.me/cveNotify/163504 · Telegram Post
• https://t.me/CVEtracker/53503 · Telegram Post
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-132-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-132-02.pdf · Note