Critical severity · published Jul 29, 2026
CVE-2026-0667
CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity…
9.3
CVSS
0.5%
EPSS
No
On KEV
Description
CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
RemoteConnect · Schneider Electric
Versions prior to R3.4.2 · source: vendor
S4
SCADAPack 47x · Schneider Electric
Versions prior to R3.4.2 (Firmware version prior to 9.12.2) · source: vendor
S4
SCADAPack 47xi · Schneider Electric
Versions prior to R3.4.2 (Firmware version prior to 9.12.2) · source: vendor
S5
SCADAPack 57x · Schneider Electric
All Versions · source: vendor
In the news
VulnerabilityCritical
Schneider Electric SCADAPack and RemoteConnect
View CSAF
Summary
Schneider Electric is aware of a vulnerability in its SCADAPack™ x70 RTU products. The SCADAPack™ 47xi, SCADAPack™ 47x and SCADAPack™ 57x product are Remote Terminal Units that provide communication capabilities for remote monitoring and control. Failure to apply the remediations provided below may risk unauthorized access to your RTU, which could result in the possibility of denial of service and loss of confidentiality, integrity of the controller.
The following versions of Schneider Electric SCADAPack and RemoteConnect are affected:
SCADAPack™ vers:generic/
SCADAPack™ firmware vers:intdot/<9.12.2, 9.12.2, vers:intdot/<9.12.2, 9.12.2 ()
RemoteConnect vers:generic/
CVSS
Vendor
Equipment
Vulnerabilities
v3 9.8
Schneider Electric
Schneider Electric SCADAPack and RemoteConnect
Improper Check for Unusual or Exceptional Conditions
Background
Critical Infrastructure Sectors: Energy
Countries/Areas Deployed: Worldwide
Company Headquarters Location: France
Vulnerabilities
Expand All +
CVE-2026-0667
CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol.
View CVE Details
Affected Products
Schneider Electric SCADAPack and RemoteConnect
Vendor: Schneider Electric
Product Versi...
Mar 17, 2026·CISA Advisories
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-0667
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-0667
download.se.com
https://download.se.com/files?p_Doc_Ref=SEVD-2026-041-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-041-01.pdf
More from RemoteConnect
9.8
CVE-2022-26507
A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7
9.1
CVE-2021-22779
Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control…
7.8
CVE-2021-22797
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious script to be deployed in an unauthorized…
7.1
CVE-2021-22780
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process…
7.1
CVE-2021-22778
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process…
