What is CVE-2026-62645?

CVE-2026-62645 is a critical-severity vulnerability, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2026-09-08.

How severe is CVE-2026-62645?

Critical severity. CVSS v3 base score is 9.8 out of 10.

CVE-2026-62645

CVE-2026-62645

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web interface that can be used to calculate the current and past session ID numbers. This could allow an attacker to bypass the authentication and gain unauthorized access to the device.

Vulnerability class: Broken Authentication

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

productcert@siemens.com

Frequently asked questions

What is CVE-2026-62645?: CVE-2026-62645 is a critical-severity vulnerability, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2026-09-08.
How severe is CVE-2026-62645?: Critical severity. CVSS v3 base score is 9.8 out of 10.