Insufficient Password Policy in Eaton easyE4 Product Raises Security Concerns
CVE-2026-41021

7.5HIGH

Key Information:

Vendor

Eaton

Status
Easye4
Vendor
CVE Published:
27 October 2026

What is CVE-2026-41021?

The Eaton easyE4 product faces significant security risks due to an insufficiently robust password policy. Attackers who gain access to password hashes, potentially through other vulnerabilities, can execute offline password-guessing attacks. This situation could lead to unauthorized recovery of user credentials, compromising the integrity and security of the system and its users.

Affected Version(s)

easyE4 0 < 2.46

References

https://www.eaton.com/content/dam/eaton/company/news-insi...
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.