PT-2026-40037 · Schneider Electric · Ecostruxure Panel Server

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-6866

Mitre

CVSS v4.0

8.2

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials.

Fix

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2026-6866

Affected Products

Ecostruxure Panel Server

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-6866 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-132-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-132-04.pdf · Note