---
id: CVE-2026-62645
title: A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70)
summary: >-
  A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).
  Information is exposed through the web interface that can be used to calculate
  the current and past session ID numbers. This could allow an attacker to
  bypass t…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-306
vendor: Siemens
product: Reyrolle 7SR5
affected:
  - reyrolle_7sr5 < V2.70
published: '2026-09-08'
updated: '2026-09-08'
sourceUpdated: '2026-09-08T18:41:55.127'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-62645'
references:
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-142885.html'
    label: productcert@siemens.com
tags:
  - nvd
  - cve.org
epss: 0.00646
epssPercentile: 0.48806
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-09-08T12:26:09.683968Z'
ingestedAt: '2026-09-08T15:33:26.982Z'
---

## Overview

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web interface that can be used to calculate the current and past session ID numbers. This could allow an attacker to bypass the authentication and gain unauthorized access to the device.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.