Live › vulnerability › CVE-2026-41021
Go to dashboardEaton easyE4 devices enforce an insufficiently strong password policy. An attacker who obtains a password hash, for example through CVE-2026-41020, can guess passwords offline and may recover user credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 12:31 UTC. All times on this page are UTC.
Operators of Eaton easyE4 devices. The sources do not say which firmware versions are affected or which password settings are configurable. unknown
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline password-guessing attack and potentially recover user credentials.
This page as .md · .json · in your agent: get_signal("CVE-2026-41021")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.