CVE-2026-62650 — Siemens / Reyrolle 7SR5

CVE-2026-62650

Siemens / Reyrolle 7SR5 PUBLISHED

Description (CNA)

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the web-based management interface are not properly enforced, allowing role-based access control (RBAC) restrictions to be bypassed through manipulation of request data. This could allow an authenticated, low-privileged remote attacker to escalate privileges to an administrative level.

Affected (CNA)

Vendor / product	Versions
Siemens / Reyrolle 7SR5	affected 0 before V2.70

CWE

CWE-288

References

https://cert-portal.siemens.com/productcert/html/ssa-142885.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.