CVE-2026-6865

Summary

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied input is improperly handled during server-side file path processing.

Affected Software

VendorProductVersion RangeStatus
Schneider ElectricEasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & ControllerVersions 11.06.31 and prioraffected
Schneider ElectricSaitel DP Remote Terminal Unit & ControllerVersions 11.06.36 and prioraffected

Weaknesses

  • CWE-22: CWE-22 Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”)

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References