Schneider Electric has released security updates addressing CVE-2026-4827, a vulnerability across its Easergy, EcoStruxure Power Automation, PowerLogic, and Saitel product families. The flaw could allow session hijacking, enabling unauthorized operations within affected industrial control systems. CISA has published the advisory ICSA-26-169-07. No public exploitation has been confirmed, but risk increases for unpatched systems.

Which products are affected?

Easergy C5, Easergy MiCOM P30, Easergy MiCOM P40, Easergy MiCOM C264, EcoStruxure Power Automation System Gateway, EcoStruxure Power Automation System User Interface, EcoStruxure Power Operation, PowerLogic P5, PowerLogic P7, PowerLogic T300, PowerLogic T500, Saitel DP RTU, EasyLogic T150

What should defenders do?

Apply the fixes provided by Schneider Electric for each affected product version. Refer to the CSAF advisory for specific version thresholds and download links. Prioritize patching systems exposed to remote networks or used for critical infrastructure operations. Monitor for official Schneider Electric security bulletins for the latest patch availability and version-specific guidance.

highVulnerability

Schneider Electric Advises Patches for Multiple ICS Products Tracked as CVE-2026-4827

Session hijacking vulnerability affects Easergy, EcoStruxure Power Automation, PowerLogic, and Saitel product lines

CyberIntel DeskPublished 26 days agoUpdated less than a minute ago3 min read

Key Takeaways

CVE-2026-4827 affects multiple Schneider Electric product lines including Easergy, EcoStruxure Power Automation, PowerLogic, and Saitel.
The vulnerability could allow session hijacking, enabling unauthorized operations within affected industrial control systems.
CISA has published advisory ICSA-26-169-07 with version-specific impact details.
No public exploitation has been confirmed, but risk increases for systems remaining unpatched.
Schneider Electric has released fixes; users should apply updates per the advisory version thresholds.

Related Security News

highVulnerability

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

The maintainers of the official MCP Python SDK disclosed a security vulnerability that could allow a malicious server to trick applications into divulging OAuth credentials. The issue affects the handling of client secrets, authorization codes, and PKCE proof keys when communicating with token endpoints.

The Hacker Newsabout 4 hours ago1 min read

highCVE

CISA Adds Two Citrix NetScaler Vulnerabilities to Known Exploited Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. CVE-2026-88771 involves improper input validation and CVE-2026-88772 involves improper restriction of operations within the bounds of a memory buffer, both affecting Citrix NetScaler products. The additions trigger remediation requirements under Binding Operational Directive 26-04 for Federal Civilian Executive Branch agencies.

CISA Advisoriesabout 5 hours ago2 min read