Medium severity · published Sep 11, 2026
CVE-2026-81861
CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality
5.9
CVSS
0.5%
EPSS
No
On KEV
Description
CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
S3
SCADAPack 32 · Schneider Electric
All versions · source: vendor
S3
SCADAPack 3xx · Schneider Electric
All versions · source: vendor
S4
SCADAPack 470R · Schneider Electric
All versions · source: vendor
S4
SCADAPack 47x · Schneider Electric
All versions · source: vendor
S4
SCADAPack 47xd · Schneider Electric
All versions · source: vendor
S4
SCADAPack 47xi · Schneider Electric
All versions · source: vendor
S5
SCADAPack 57x · Schneider Electric
All versions · source: vendor
In the news
VulnerabilityMedium
Schneider Electric SCADAPack x70 Products
View CSAF
Summary
Schneider Electric is aware of a vulnerability in its SCADAPack x70 products. The SCADAPack 47x, SCADAPack 47xi, SCADAPack 47xd, SCADAPack 470R and SCADAPack 57x products are Remote Terminal Units that provide communication capabilities for remote monitoring and control. Failure to apply the mitigations provided below may increase the risk of unauthorized access to RTU configuration through the Secure Lock functionality, potentially resulting in a loss of confidentiality.
The following versions of Schneider Electric SCADAPack x70 Products are affected:
SCADAPack 47x vers:all/* (CVE-2026-81861)
SCADAPack 47xi vers:all/* (CVE-2026-81861)
SCADAPack 47xd vers:all/* (CVE-2026-81861)
SCADAPack 470R vers:all/* (CVE-2026-81861)
SCADAPack 57x vers:all/* (CVE-2026-81861)
SCADAPack 3xx vers:all/* (CVE-2026-81861)
SCADAPack 32 vers:all/* (CVE-2026-81861)
CVSS
Vendor
Equipment
Vulnerabilities
v3 6.5
Schneider Electric
Schneider Electric SCADAPack x70 Products
Insufficiently Protected Credentials
Background
Critical Infrastructure Sectors: Critical Manufacturing, Energy
Countries/Areas Deployed: Worldwide
Company Headquarters Location: France
Vulnerabilities
Expand All +
CVE-2026-81861
There is an insufficiently protected credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality.
View CVE Deta...
Sep 15, 2026·CISA Advisories
