EcoStruxure IT DCE EUVD-2026-35446

Patch available per vendor advisory SEVD-2026-160-01 (https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-160-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-160-01.pdf) - apply the fixed EcoStruxure IT Data Center Expert build referenced in that bulletin; the exact fixed version is not independently confirmed in the provided intelligence, so consult the PDF directly. Until the upgrade is deployed, restrict the DCE SOAP service to a trusted management network segment via firewall ACLs (side effect: breaks remote integrations and northbound monitoring connectors that rely on SOAP), tightly review and minimize the population of low-privilege DCE user accounts to remove untrusted internal users (side effect: may disrupt operator/contractor workflows), and audit DCE host file contents to remove or relocate any plaintext secrets, credentials, or configuration files that an XXE read would expose. Egress filtering from the DCE host to the internet and internal sensitive endpoints reduces blind/out-of-band XXE exfiltration paths (side effect: may interfere with legitimate vendor telemetry or update channels).