Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-6865

Improper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Products

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
schneider

Description

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied input is improperly handled during server-side file path processing.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller

Default version status: unaffected

  • Versions 11.06.31 and prioraffected

Schneider Electric Saitel DP Remote Terminal Unit & Controller

Default version status: unaffected

  • Versions 11.06.36 and prioraffected

References