How to fix or mitigate CVE-2026-6865?

Within 24 hours, inventory all Schneider Electric Saitel DP and EasyLogic T150 units and confirm installed firmware versions against vendor notifications. Within 7 days, implement network segmentation to restrict remote access to affected RTUs, enforce authentication requirements on all management interfaces, and deploy network monitoring to detect anomalous file access patterns. Over 30 days, establish a continuous monitoring process for Schneider Electric security advisories regarding CVE-2026-6865 patch availability and develop a tested emergency deployment plan to rapidly apply patches once released by the vendor.

Easylogic T150 Formerly Saitel Dr Remote Terminal Unit Controller CVE-2026-6865

Q: What is the CVSS score of CVE-2026-6865?

CVE-2026-6865 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-29460 HIGH

Path Traversal (CWE-22)

2026-05-12 schneider

GHSA-m738-m34q-2xgp

Authentication Bypass Path Traversal Schneider Electric Easylogic T150 Formerly Saitel Dr Remote Terminal Unit Controller Saitel Dp Remote Terminal Unit Controller

7.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 23, 2026 - 22:30 vuln.today

CVE Published

May 12, 2026 - 12:29 nvd

UNKNOWN (no severity yet)

CVE Published

May 12, 2026 - 12:29 cve.org

HIGH 7.1

DescriptionCVE.org

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied input is improperly handled during server-side file path processing.

AnalysisAI

Unauthorized file disclosure in Schneider Electric Saitel DP and EasyLogic T150 (formerly Saitel DR) Remote Terminal Units lets a low-privileged remote attacker read sensitive files outside intended directories via improper server-side file path handling. The advisory tagging also associates the flaw with an authentication-bypass angle, and the primary impact is confidentiality of files on the affected OT/ICS controllers. There is no public exploit identified at time of analysis, EPSS risk is very low (0.06%, 17th percentile), and CISA SSVC rates exploitation as none.