CVE-2026-41021
High · 7.5CVSS
7.5
EPSS
0.2%
Published
Oct 27, 2026
CISA due date
—
The record
Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline password-guessing attack and potentially recover user credentials.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-85216 MISP contains an authentication bypass vulnerability in its LDAP and LinOTP… CWE-521
- CVE-2026-73778 A vulnerability exists in the Credential Manager component that may allow for… CWE-521
- CVE-2026-19293 SMP security request (from peripheral) does not include the maximum encryption key size… CWE-521
- CVE-2026-56577 HCL MyCloud was affected with Weak Password Policy. CWE-521
- CVE-2026-35097 KTM System e-BOK enforces a maximum password length of six numeric digits and does not… CWE-521
- CVE-2026-11493 A weakness has been identified in Tenda AC15 15.03.05.19. CWE-521
- CVE-2024-40684 IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0… CWE-521
- CVE-2026-9394 A vulnerability was determined in Besen BS20 EV Charging Station up to 20260426. CWE-521