CVE-2026-81861: Schneider Electric Scadapack 32

Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days.

CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality.

Affected products

• Schneider Electric Scadapack 32: any version
• Schneider Electric Scadapack 3xx: any version
• Schneider Electric Scadapack 470r: any version
• Schneider Electric Scadapack 47x: any version
• Schneider Electric Scadapack 47xd: any version
• Schneider Electric Scadapack 47xi: any version
• Schneider Electric Scadapack 57x: any version

Published 2026-09-11. Last modified 2026-09-18.