Schneider Electric has disclosed a vulnerability in its SCADAPack x70 series of Remote Terminal Units. The issue, tracked as CVE-2026-81861, involves insufficiently protected credentials that could expose authentication information and lead to unauthorized access to RTU configuration through the Secure Lock functionality. The vulnerability affects SCADAPack 47x, 47xi, 47xd, 470R, 57x, 3xx, and 32 models. Schneider Electric rates the base severity as medium with a CVSS v3.1 score of 6.5. No active exploitation has been reported, but the vendor recommends immediate implementation of Role-Based Access Control (RBAC) and network segmentation as mitigations.

Which products are affected?

SCADAPack 47x, SCADAPack 47xi, SCADAPack 47xd, SCADAPack 470R, SCADAPack 57x, SCADAPack 3xx, SCADAPack 32

What should defenders do?

Implement Role-Based Access Control (RBAC) as recommended by Schneider Electric and follow the Security Guidelines for Administrators. Configure network segmentation to restrict access between trusted and untrusted networks. Enable and implement the RTU firewall service to restrict unauthorized access to device services. Consult the SCADAPack Cybersecurity Guide for hardening and secured communication best practices. Apply all standard practices referenced in the SCADAPack Cybersecurity Guide, including locating control system networks behind firewalls and isolating them from business networks.

mediumCVE

Schneider Electric SCADAPack x70 Products Affected by Insufficiently Protected Credentials Vulnerability

CVE-2026-81861 impacts multiple SCADAPack models; exploitation could expose authentication information and allow unauthorized RTU access.

CyberIntel DeskPublished 14 days agoUpdated less than a minute ago2 min read

Key Takeaways

CVE-2026-81861 affects Schneider Electric SCADAPack x70 product line including models 47x, 47xi, 47xd, 470R, 57x, 3xx, and 32.
The vulnerability involves insufficiently protected credentials that could expose authentication information and allow unauthorized access to RTU configuration.
CVSS v3.1 base score is 6.5 (MEDIUM severity).
No active exploitation has been reported as of the advisory publication.
Schneider Electric recommends implementing RBAC, network segmentation, and RTU firewall service as immediate mitigations.

Related Security News

highCVE

CISA Adds Two Citrix NetScaler Vulnerabilities to Known Exploited Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. CVE-2026-88771 involves improper input validation and CVE-2026-88772 involves improper restriction of operations within the bounds of a memory buffer, both affecting Citrix NetScaler products. The additions trigger remediation requirements under Binding Operational Directive 26-04 for Federal Civilian Executive Branch agencies.

CISA Advisoriesabout 5 hours ago2 min read

Schneider Electric SCADAPack x70 Products Affected by Insufficiently Protected Credentials Vulnerability

Key Takeaways

Related Security News

CISA Adds Two Citrix NetScaler Vulnerabilities to Known Exploited Catalog

Quick answers

Security Details

Sources

CISA Adds CVE-2026-86950 to Known Exploited Vulnerabilities Catalog

Apple Patches Actively Exploited CoreGraphics Vulnerability in iOS, iPadOS, and macOS

CISA Adds Two Critical Citrix NetScaler Flaws to KEV Catalog

CISA Adds Two Citrix NetScaler Zero-Days to KEV Catalog; Eight Vulnerabilities Disclosed

CISA Adds Actively Exploited SharePoint and MikroTik Vulnerabilities to KEV Catalog