CVE-2026-62652

MediumCVSS 5.3/10Last modified Sep 10, 2026

Description

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engineer the device's firmware, facilitating the identification of further vulnerabilities.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Sep 8, 2026
Last modified
Sep 10, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-626536.8A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol thCVE-2026-626546.8A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated via a physical key CVE-2026-626555.7A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or resCVE-2026-626565.4A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router aCVE-2026-626574.9A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk modeCVE-2026-626584.7A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers that could allow someone already logged in to the device to rCVE-2026-626594.3A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the local netwCVE-2026-62668.3A flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, automatically links an external Identity Provider (CVE-2026-626637.5Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.4, all four media filters (image, audio, vCVE-2026-626645.4FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates CVE-2026-626668.8Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.6, Grav API plugin UseCVE-2026-626678.1Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.6, the Grav API plugin
CVE-2026-62652: Medium severity, CVSS 5.3 | Vulnix