{"id":"CVE-2026-41020","aliases":[],"title":"Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to…","titleSource":"Eaton","descriptionSource":"Eaton","products":[{"vendor":"Eaton","name":"easyE4","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"2.46","versionType":"custom"}],"defaultStatus":"unaffected","source":"Eaton","url":"https://www.cve.org/CVERecord?id=CVE-2026-41020"}],"remediation":[],"description":"Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentication exchange and gain unauthorized access to the device.","severity":"high","score":7.5,"published":"2026-10-27T11:05:51.545Z","modified":"2026-10-27T11:05:51.545Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-va-2026-1017.pdf"],"sources":[{"name":"CVE","id":"CVE-2026-41020","modified":"2026-10-27T11:05:51.545Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-41020"}],"assessments":[{"source":"Eaton","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","score":7.5}],"sourceAffected":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T20:15:32.897Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}