CVE-2026-3869

Last refreshed2026-10-06

Status: UPDATED | Advisory ID: CVE-2026-3869

Key Details

CVE	CVE-2026-3869
CVSS Score / Version	9.2 (Critical) / CVSS v4.0
Updated	2026-09-18
Affected products	Schneider Electric Modicon M580 and Schneider Electric Modicon M580 Safety
Classified as	CWE-303 (Incorrect Implementation of Authentication Algorithm)

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
Schneider Electric	Modicon M580
Schneider Electric	Modicon M580 Safety

Vendor

Product

Affected Versions

Patch Status

Schneider Electric

Modicon M580

Schneider Electric

Modicon M580 Safety

Subsystems	General OT
Sectors	Multiple

What to Know

CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC.

What to Do

Monitor Schneider Electric's web page for any future patch releases.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-3869
CVE	https://www.cve.org/CVERecord?id=CVE-2026-3869

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-3869

CVE