CVE-2026-6865

HIGH

Improper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Products

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-6865 has a selected CVSS score of 7.1 (high).

Description

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied input is improperly handled during server-side file path processing.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 12, 2026 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller

Browse Schneider Electric / EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller

Default status: unaffected

CVE ListVersions 11.06.31 and prioraffected

Saitel DP Remote Terminal Unit & Controller

Browse Schneider Electric / Saitel DP Remote Terminal Unit & Controller

Default status: unaffected

CVE ListVersions 11.06.36 and prioraffected

References

2