CVE-2026-81861

Friday, September 11, 2026

5.9

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Summary

CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality.

Affected Software

Vendor	Product	Version Range	Status
Schneider Electric	SCADAPack 47x	`All versions`	affected
Schneider Electric	SCADAPack 47xi	`All versions`	affected
Schneider Electric	SCADAPack 47xd	`All versions`	affected
Schneider Electric	SCADAPack 470R	`All versions`	affected
Schneider Electric	SCADAPack 57x	`All versions`	affected
Schneider Electric	SCADAPack 3xx	`All versions`	affected
Schneider Electric	SCADAPack 32	`All versions`	affected

Weaknesses

CWE-522: CWE-522: Insufficiently Protected Credentials

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: no
- Technical Impact: partial

References

https://download.se.com/files?p_Doc_Ref=SEVD-2026-251-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-251-03.pdf

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.