CVE-2026-41021: High severity Eaton easyE4 vulnerability
Published Oct 27, 2026
·Updated
Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline password-guessing attack and potentially recover user credentials.
Affected Software
1 affected component
Eaton easyE4
Event History
Oct 27, 2026
CVE Published
via MITRE·11:23 AM
Data Sourced
via MITRE·11:23 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What must an attacker obtain before attempting to recover credentials?
The attacker needs a password hash. The hash could be obtained through CVE-2026-41020 or another unspecified source, after which password guessing can be performed offline.