[Control systems] Schneider Electric security advisory (AV26-210)

Serial number: AV26-210
Date: March 10, 2026

On March 10, 2026, Schneider Electric published advisories to address vulnerabilities in the following products:

  • EcoStruxure Foxboro DCS – versions prior to CS8.1
  • EcoStruxure Automation Expert – versions prior to v25.0.1
  • EcoStruxure IT Data Center Expert – versions v9.0 and prior
  • EcoStruxure Power Monitoring Expert (PME) – versions 2022, 2023, 2023 R2, 2024 and 2024 R2
  • EcoStruxure Power Operation (EPO) Advanced Reporting and Dashboards Module – versions 2022 and 2024
  • Modicon M241/M251 – versions prior to 5.4.13.12
  • Modicon M262 – versions prior to 5.4.10.12
  • Modicon M258/LM058 – all versions

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.

Date modified: