Authentication Vulnerability in Eaton easyE4 Device
CVE-2026-41020

7.5HIGH

Key Information:

Vendor

Eaton

Status
Easye4
Vendor
CVE Published:
27 October 2026

What is CVE-2026-41020?

The Eaton easyE4 device is vulnerable due to its use of a static nonce during the authentication process. This design flaw allows attackers to capture authentication traffic and replay valid authentication exchanges, potentially granting them unauthorized access to the device. It is crucial for users of the easyE4 to be aware of this vulnerability to implement necessary security measures.

Affected Version(s)

easyE4 0 < 2.46

References

https://www.eaton.com/content/dam/eaton/company/news-insi...
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.