CVE-2026-41020High· 7.5▾ TwilightEaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentication exchange and gain unauthorized access to the device.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 28.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentication exchange and gain unauthorized access to the device.
easyE4 < 2.46Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-41021High· 7.5Eaton easyE4 uses an insufficiently strong password policy
CVE-2026-41022Medium· 5.9Eaton easySoft improperly validates TLS certificates presented by easyE4 devices
CVE-2026-37982Medium· 6.8Keycloak: org.keycloak.authentication: keycloak: unauthorized account takeover via webauthn token replay
CVE-2026-104381Medium· 6.0Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service
CVE-2026-117470Medium· 6.5WebAuthn assertion replay permits second-factor bypass in Psono Server
CVE-2026-116825Medium· 6.5YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay via ActivityPub Inbox