BaseFortify

Publication date: 2026-05-12

Last updated on: 2026-05-14

Assigner: Schneider Electric SE

Description

CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-12

Last Modified

2026-05-14

Generated

2026-06-30

EPSS Evaluated

2026-06-28

NVD

CVE-2026-4827

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-331	The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.

Attack-Flow Graph

AI Quick Actions have not been generated yet.

Hi! I’m here to help you understand CVE-2026-4827. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70