{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/easye4/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:eaton:easye4:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-41020"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["easyE4"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Eaton"],"content_html":"\u003cp\u003eEaton easyE4 devices utilize a static nonce during authentication. This allows an unauthenticated attacker with access to captured authentication traffic to replay a valid authentication exchange and gain unauthorized access to the device.\u003c/p\u003e\n","date_modified":"2026-10-27T13:50:05Z","date_published":"2026-10-27T13:50:05Z","id":"https://feed.craftedsignal.io/briefs/2026-10-eaton-easye4-static-nonce/","summary":"Eaton easyE4 uses a static nonce during authentication, allowing an unauthenticated attacker to replay captured authentication traffic to gain unauthorized access to the device.","title":"Eaton easyE4: Authentication replay vulnerability via static nonce (CVE-2026-41020)","url":"https://feed.craftedsignal.io/briefs/2026-10-eaton-easye4-static-nonce/"}],"language":"en","title":"CraftedSignal Threat Feed - EasyE4","version":"https://jsonfeed.org/version/1.1"}