[Control systems] Schneider Electric security advisory (AV26-350)

Serial number: AV26-350
Date: April 14, 2026

On April 14, 2026, Schneider Electric published advisories to address vulnerabilities in the following products:

• Easergy MiCOM Px40 Series – multiple versions and models
• Connexium Managed Switches TCSESM – all versions
• Modicon Managed Switches MCSESM, MCSESP – all versions
• Modicon Redundancy Switches MCSESR – all versions
• PowerChute Serial Shutdown – version 1.4 and prior

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• Use of Hard-coded Credentials vulnerability on Easergy MiCOM Px40 Series (PDF)
• Third-Party vulnerability on Modicon Networking Managed Switches (PDF)
• Multiple Vulnerabilities on PowerChute™ Serial Shutdown (PDF)
• Schneider Electric Security Notifications