Quick answers
- Is CVE-2026-4827 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-4827 being exploited in the wild.
- How severe is CVE-2026-4827?
- Informational severity, with a CVSS score of 8.7, published 12 May 2026.
- Which products and versions are affected?
- Schneider Electric Schneider Electric Products.
- Is there a fix for CVE-2026-4827?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-4827 attacked?
- It is attacked over the network, in a network appliance.
- Am I affected by CVE-2026-4827?
- Check whether you run Schneider Electric Products. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
An insufficient entropy vulnerability (CWE-331) exists within the session management protections of affected Schneider Electric products. The root cause is the generation of session identifiers or security tokens with low randomness, making them susceptible to prediction or brute-force attacks. A network-based attacker can exploit these weaknesses to bypass authentication and gain unauthorized access to the system. According to the CVSS 4.0 vector, the attack requires some user interaction (UI:P) but no prior privileges (PR:N). Successful exploitation could result in high impacts on confidentiality and integrity.
Affected products
- Schneider Electric Schneider Electric Products
Timeline
- 2026-05-12: disclosed
- 2026-05-12: advisory