Home / Items
Vendor advisorySeverity 7.2 high
SAGE RTU
SEVD-2026-286-02 · Schneider Electric · October 13, 2026
Summary
Schneider Electric is aware of a vulnerability in its SAGE RTU products. The SAGE RTU products are a line of devices designed for substation data acquisition and control. Failure to apply the mitigations provided below may enable a privileged user to install maliciously modified firmware on a SAGE RTU during an upgrade operation, resulting in modified device behavior.
From Schneider Electric (vendor's own words, quoted), quoted as published. Check the source before acting.
What to do
Version C3414-500-S02L0 of SAGE RTU includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/C3414-500-S02L0_Firmware/ • Reboot needed: Yes
After upgrading, navigate to the CPU configuration page to verify the firmware version number is correct.
Vendor fix or mitigation, quoted from the advisory.
Each CVE in this advisory
| CVE | Severity | Known exploited | Exploit likelihood |
|---|---|---|---|
| CVE-2026-102250 | 7.2 high | No | 0.2% |
Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).
Affected products
| Vendor | Product |
|---|---|
| Schneider Electric | Sage RTU 1410 |
| Schneider Electric | Sage RTU 1430 |
| Schneider Electric | Sage RTU 1450 |
| Schneider Electric | Sage RTU 2400 |
| Schneider Electric | Sage RTU 3030 Magnum |
| Schneider Electric | Sage RTU 4400 |
Why it's on these mode pages
- Pipeline: Vendor table: Schneider Electric (matched by rule)
Change history
- October 13, 2026: Original Release
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com