ZDI-26-084 HIGH 7.8 Published Feb 12, 2026

Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability

Schneider

Schneider Electric EcoStruxure Power Build contains a remote code execution vulnerability (CVE-2025-13845) that allows attackers to execute arbitrary code if a user visits a malicious webpage or opens a malicious file. This high-severity vulnerability rated 7.8 CVSS poses a significant risk to organizations using this power management software. Security teams should immediately patch affected installations and implement user awareness training to prevent social engineering attacks that could exploit this vulnerability.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy