Path Traversal Vulnerability in Schneider Electric Products
CVE-2026-6865

7.1HIGH

Key Information:

Vendor: Schneider Electric
Status: Easylogic T150 (formerly Saitel Dr) Remote Terminal Unit & Controller; Saitel Dp Remote Terminal Unit & Controller
Vendor: CVE Published:; 12 May 2026

🔔 Create Schneider Electric Vulnerability Alert

What is CVE-2026-6865?

This vulnerability arises from a flaw that allows improper handling of user-supplied input during file path processing on the server side. As a result, it may lead to unauthorized access to sensitive files on affected Schneider Electric products, enabling potential exposure of confidential data.

Affected Version(s)

EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller Versions 11.06.31 and prior

Saitel DP Remote Terminal Unit & Controller Versions 11.06.36 and prior

References

https://download.schneider-electric.com/files?p_Doc_Ref=S...

CVSS V4

Score:

7.1

Severity:

HIGH

Confidentiality:

High

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 12, 2026
Vulnerability Reserved
Apr 22, 2026

CVE-2026-6865 Data

JSON