CVE-2026-81861

🔴 Schneider Electric SCADAPack RTUs vulnerable to credential theft across critical infrastructure Schneider Electric disclosed a vulnerability (CVE-2026-81861) affecting SCADAPack x70 Remote Terminal Units deployed worldwide in critical manufacturing and energy sectors. The flaw involves insufficiently protected credentials in the Secure Lock functionality, enabling unauthorized RTU configuration access and potential loss of confidentiality. Affected models: SCADAPack 47x, 47xi, 47xd, 470R, 57x, 3xx, and 32 — all versions compromised. • Replace Secure Lock with Role-Based Access Control (RBAC), documented in SCADAPack security guidelines

Schneider Electric CVE-2026-81861 in SCADAPack x70 RTUs exposes credentials via legacy Secure Lock, risking unauthorized access. Details: https://cyberworldops.eu/en/schneider-electric-scadapack-credential-flaw-exposes-rtu #ICSsecurity #SCADA https://cyberworldops.eu/en/schneider-electric-scadapack-credential-flaw-exposes-rtu

TRC analysis shows attackers exploiting CVE-2026-81861 in Schneider Electric SCADAPack RTUs to access industrial control systems through weak authentication. Once inside, they moved laterally between RTU devices and established persistent command channels. Runtime segmentation helps contain such post-compromise activity in critical infrastructure networks. #CloudSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/schneider-electric-scadapack-x70-cve-2026-81861-credentials-vulnerability