CVE-2026-6865 — Improper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Products

CVE-2026-6865

Improper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Products PUBLISHED

Description (CNA)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied input is improperly handled during server-side file path processing.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / EasyLogic T150 (formerly Saitel DR) Remote Terminal Unit & Controller	affected Versions 11.06.31 and prior
Schneider Electric / Saitel DP Remote Terminal Unit & Controller	affected Versions 11.06.36 and prior

CWE

CWE-22

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-132-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-132-03.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.