Login Request a demo
High severity · published Oct 13, 2026
CVE-2026-102250
CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware…
8.6
CVSS
0.2%
EPSS
No
On KEV
Description
CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SR
Sage RTU 1410 · Schneider Electric
All versions prior to version C3414-500-S02L0 · source: vendor
SR
Sage RTU 1430 · Schneider Electric
All versions prior to version C3414-500-S02L0 · source: vendor
SR
Sage RTU 1450 · Schneider Electric
All versions prior to version C3414-500-S02L0 · source: vendor
SR
Sage RTU 2400 · Schneider Electric
All versions prior to version C3414-500-S02L0 · source: vendor
SR
Sage RTU 3030 Magnum · Schneider Electric
All versions prior to version C3414-500-S02L0 · source: vendor
SR
Sage RTU 4400 · Schneider Electric
All versions prior to version C3414-500-S02L0 · source: vendor
Affected product
SR
Sage RTU 1410
Schneider Electric
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-102250
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-102250
download.schneider-electric.com
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-286-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-286-02.pdf