Insecure Default Initialization Vulnerability in Schneider Electric Products

CVE-2026-6866

What is CVE-2026-6866?

An insecure default initialization vulnerability exists in Schneider Electric products, which may lead to the unauthorized disclosure of sensitive information. In specific scenarios, when credentials revert to their initial settings, an attacker could exploit this weakness to authenticate using well-known default credentials. This highlights the critical need for users to ensure proper configuration and security measures to defend against unauthorized access.

References