CVE-2026-6865: Schneider Electric Easylogic t150 Formerly Saitel Dr Remote Terminal Unit & Controller

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied input is improperly handled during server-side file path processing.

Affected products

• Schneider Electric Easylogic t150 Formerly Saitel Dr Remote Terminal Unit & Controller: up to and including 11.06.31
• Schneider Electric Saitel Dp Remote Terminal Unit & Controller: up to and including 11.06.36

Published 2026-05-12. Last modified 2026-06-17.