Schneider Electric Scadapack 47x vulnerabilities

2 CVEs affecting Schneider Electric Scadapack 47x, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-81861, published 2026-09-11.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-81861, published 2026-09-11. Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days. CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality.
• CVE-2026-0667, published 2026-07-29. Critical severity, CVSS 9.3. EPSS: 0.5% chance of exploitation in the next 30 days. CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating…