Vulnerability Description
CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider-Electric | Ecostruxure Panel Server Pas400 Firmware | < 002.006.000 |
| Schneider-Electric | Ecostruxure Panel Server Pas400 | - |
| Schneider-Electric | Ecostruxure Panel Server Pas600 Firmware | < 002.006.000 |
| Schneider-Electric | Ecostruxure Panel Server Pas600 | - |
| Schneider-Electric | Ecostruxure Panel Server Pas600V2 Firmware | < 002.006.000 |
| Schneider-Electric | Ecostruxure Panel Server Pas600V2 | - |
| Schneider-Electric | Ecostruxure Panel Server Pas800 Firmware | < 002.006.000 |
| Schneider-Electric | Ecostruxure Panel Server Pas800 | - |
| Schneider-Electric | Ecostruxure Panel Server Pas800V2 Firmware | < 002.006.000 |
| Schneider-Electric | Ecostruxure Panel Server Pas800V2 | - |
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-6866?
CVE-2026-6866 is a vulnerability with a CVSS score of 7.5 (HIGH). CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rar...
How severe is CVE-2026-6866?
CVE-2026-6866 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-6866?
Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Ecostruxure Panel Server Pas400 Firmware, Schneider-Electric Ecostruxure Panel Server Pas400, Schneider-Electric Ecostruxure Panel Server Pas600 Firmware, Schneider-Electric Ecostruxure Panel Server Pas600, Schneider-Electric Ecostruxure Panel Server Pas600V2 Firmware.