Vulnerability record/PUBLISHED/Published Oct 27, 2026 11:23:34 UTC

CVE-2026-41021

Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline password-guessing attack and potentially recover user credentials.

Base score7.5/ 10

SeverityHighCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityHigh

Attack vectorNetworkAV

Attack complexityHighAC

Privileges requiredNonePR

User interactionRequiredUI

ScopeUnchangedS

Confidentiality impactHighC

Integrity impactHighI

Availability impactHighA

CVSS vector stringCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering AuthorityEaton

Last updatedOct 27, 2026 11:23:34 UTC

PublishedOct 27, 2026 11:23:34 UTC

ReservedApr 16, 2026 05:27:09 UTC