Reyrolle 7SR5 Authorization Bypass via Request Manipulation

CVE-2026-62650 represents a critical authorization flaw in Reyrolle 7SR5 power management devices affecting all versions below V2.70. The vulnerability allows authenticated users with low privileges to escalate to administrative access by manipulating request parameters sent to the web-based management interface. This is particularly concerning because Reyrolle devices are widely deployed in critical infrastructure environments including electrical substations and power distribution networks. An attacker who gains initial low-level access—whether through social engineering, credential theft, or another compromise—can leverage this flaw to obtain full administrative control without proper authentication or authorization checks, potentially enabling destructive operations on critical power systems.

While this CVE currently shows zero matching Casky skills due to its recent disclosure, practitioners monitoring these devices should focus on detection patterns aligned with privilege escalation and abuse of legitimate functionality. Security teams would detect this attack through analysis of HTTP request logs showing anomalous parameter manipulation targeting administrative functions, combined with behavioral analysis of how low-privileged accounts suddenly access high-privilege operations. Though not yet mapped to specific MITRE ATT&CK techniques in Casky's current skill set, this vulnerability falls within the privilege escalation and lateral movement categories. Organizations can prepare by implementing network segmentation around management interfaces, enforcing stronger authentication mechanisms beyond basic role-based checks, and monitoring for suspicious parameter tampering in web application traffic to Reyrolle devices.