Schneider Electric EcoStruxure Panel Server Initialization of a Resource with an Insecure Default (CVE-2026-6866)

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials. This plugin only...

allennlp (>=0.8.0, <=0.8.2), lapdog (0.15.4) +15 more potentially affected by CVE-2024-6866 via flask-cors (3.0.7)

flask-cors PYPI version 3.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - allennlp =0.8.0, =0.5.1.dev0, =1.1.4, =3.9.6, =0.2.0, =0.1.0, =0.1.0, =0.1.3, =0.3.8, =0.2.3, =1.0.1, =1.4.0.dev26 and more Source cves:...

feather (>=0.0.6, <=0.0.8) potentially affected by CVE-2024-6866 via flask-cors (1.1.2)

flask-cors PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - feather =0.0.6, =0.0.8 Source cves: CVE-2024-6866 Source advisory: OSV:PYSEC-2026-1383...

apilogicserver (>=1.4.0, <=5.3.33) potentially affected by CVE-2024-6866 via flask-cors (3.0.0)

flask-cors PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - apilogicserver =1.4.0, =5.3.33 Source cves: CVE-2024-6866 Source advisory: OSV:PYSEC-2026-1383...

allennlp (>=0.4.0, <=0.4.1), cli-pipeline (>=1.5.102, <=1.5.105) +9 more potentially affected by CVE-2024-6866 via flask-cors (3.0.3)

flask-cors PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - allennlp =0.4.0, =1.5.102, =0.1.1, =0.0.5.1, =0.6.0, =0.50.0, =0.0.0.1, =1.0.2, =1.0.4 - teshu 0.0.2 Source cves: CVE-2024-6866 Source...

chaosmonkey (>=1.0.8, <=1.1.0), flexget (>=2.10.60, <=3.1.104) +10 more potentially affected by CVE-2024-6866 via flask-cors (3.0.2)

flask-cors PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - chaosmonkey =1.0.8, =2.10.60, =0.1.0rc0, =23.1.0, =3.0.2.dev1, =21.10.5, =0.6.0, =1.0.2, =1.0.5 Source cves: CVE-2024-6866 Source advisory:...

comet-common (>=1.0.5, <=2.0.3), comet-core (>=1.0.4, <=2.0.1) +5 more potentially affected by CVE-2024-6866 via flask-cors (3.0.4)

flask-cors PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - comet-common =1.0.5, =1.0.4, =0.4.4a3, =0.0.24, =0.4.0, =0.4.4a3, =0.4.4 Source cves: CVE-2024-6866 Source advisory: OSV:PYSEC-2026-1383...

ag-llama-api (>=0.0.1, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.12) +298 more potentially affected by CVE-2024-6866 via flask-cors (3.0.10)

flask-cors PYPI version 3.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - ag-llama-api =0.0.1, =0.0.4, =0.0.13, =1.0.2, =2.5.0, =2.5.0, =0.1.0b2696.post0.dev1, =0.1.8, =0.0.1, =1.0.2, =1.0.1, =4.1.0, =3.4.0, =4.0....

aberoth-ephemeris (>=1.0.0, <=1.1.0), agent-manager-sdk (>=0.1.1, <=0.1.2) +26 more potentially affected by CVE-2024-6866 via flask-cors (4.0.1)

flask-cors PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - aberoth-ephemeris =1.0.0, =0.1.1, =1.0.11a1, =1.5.3, =0.1.28, =3.11.32, =1.8.0, =0.7.5, =1.1.0, =12.0.17, =1.0.0, =0.6.2, =0.1.0, =0.1.3 and...

aact-openhands (>=0.0.4, <=0.0.5), agent-actions (>=0.1.0, <=0.1.8) +61 more potentially affected by CVE-2024-6866 via flask-cors (4.0.2)

flask-cors PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - aact-openhands =0.0.4, =0.1.0, =1.1.0b2, =1.0.4, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =2.42.0, =0.1.0, =0.1.3 - cornflow 1.3.1rc2 and more Source...

agentic-ai-vass-tools (>=0.1.0, <=0.4.0), altspell (>=0.1.0, <=0.4.0) +39 more potentially affected by CVE-2024-6866 via flask-cors (5.0.1)

flask-cors PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - agentic-ai-vass-tools =0.1.0, =0.1.0, =0.21.0, =1.3.3, =0.2.0, =4.21.0b8, =1.7.0, =0.2.4, =0.1.0, =0.1.1, =3.13.7, =3.16.1 and more Source...

kozmo-core (0.1.0), scanflow (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2024-6866 via flask-cors (4.0.0a0)

flask-cors PYPI version 4.0.0a0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - kozmo-core 0.1.0 - scanflow =0.1.0, =0.5.0.3, =1.18.2 Source cves: CVE-2024-6866 Source advisory: OSV:PYSEC-2026-1383...

appfly (>=0.1.0, <=2.1.0), boyaa-seed (>=0.1.1, <=0.1.6) +6 more potentially affected by CVE-2024-6866 via flask-cors (3.0.6)

flask-cors PYPI version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - appfly =0.1.0, =0.1.1, =0.0.8, =1.2.0, =0.1.3, =0.2.10, =0.10.0, =0.100.3 Source cves: CVE-2024-6866 Source advisory: OSV:PYSEC-2026-1383...

abstra (>=1.8.26, <=2.5.1), adeso (>=0.0.1, <=0.0.4) +70 more potentially affected by CVE-2024-6866 via flask-cors (4.0.0)

flask-cors PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - abstra =1.8.26, =0.0.1, =0.0.1, =0.0.6.dev1, =0.1.2, =0.0.7, =0.2.18, =0.1.0, =51.9.7, =0.0.25, =0.0.10, =0.0.12 and more Source cves:...

astaligner (>=0.1.0, <=1.0.2), cacaodocs (>=0.1.3, <=0.1.14) +30 more potentially affected by CVE-2024-6866 via flask-cors (5.0.0)

flask-cors PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - astaligner =0.1.0, =0.1.3, =0.1.0, =1.0.0a0, =0.1.0, =1.0.0, =1.5.8, =0.1.0, =0.0.10, =3.11.44, =3.3.4, =0.0.1, =0.0.3 and more Source cves:...

altair-images (>=0.1.0, <=0.1.4), amundsen-common (>=0.14.0, <=0.15.3) +69 more potentially affected by CVE-2024-6866 via flask-cors (3.0.8)

flask-cors PYPI version 3.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - altair-images =0.1.0, =0.14.0, =3.10.0, =2.4.0, =3.9.0, =2.4.1, =0.1.0.dev1, =0.11.0, =0.9.0, =0.1.0, =0.2.2 and more Source cves:...

MINI-8GWP-6866-F3WM

Bulletin has no description...

CVE-2026-6866 Initialization of a Resource with an Insecure Default vulnerability on EcoStruxure™ Panel Server

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials...

CVE-2026-6866

creationtimestamp| type| source ---|---|--- 2026-05-12 04:05:34+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-11 2026-05-12 14:20:40+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybqzs6w2w 2026-06-09 05:00:00+00:00| seen|...

Mageia: Security Advisory (MGASA-2025-0286)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...